Share all details related to your problem, including any error messages you may have received.
Hi Team,
I am trying to implement an extra level of review post the revocation of an access review by the original certifier. So this additional review will be done by a workgroup who must have the rights to either accept the revocation made by the original certifier or disapprove of this revocation. In short , the workgroup is reviewing the original certifier’s decision and but cannot be the one to approve or revoke any access. Is there a way that I can implement this ? we have tried the Sign Off Approver Rule approach to forward the review task to the workgroup but in that case, the whole responsibility is taken from the original certifier and given to this workgroup which is not expected. We only want the workgroup to approve or reject the decision made by the certifier and not make the decision themselves. Hope this is not too confusing !! Thanks in advance.
I haven’t used this rule , but can you check “Challenge Period Enter Rule” by enabling “Enable Challenge Period” option .
Also this option is not available for all cert type.
I can think of one workaround, Make the original certifier the workgroup and delegate the access reviews to the certifiers you want using the pre-delegation rule…In this scenario, certification will return to that workgroup for final review.
Hi @vishal_kejriwal1 , thanks for your reply , it is a good workaround but has an added level of configuration which is out of scope. But definitely can be considered. Thanks
Hi @703hardik , Thanks for replying. This is a good idea though it is different approach to the expected requirements. I will try checking on it. thanks again
Hi @vishal_kejriwal1 , do you think it is possible to modify the challenger when using this rule? will i be able to change the challenger from the users to the workgroup i intend to share with?
