IIQ role modeler- Impact Analysis workflow

We are on IIQ 8.3

We have a requirement to track the Role modifications in IIQ, is that possible to leverage the OOTB WF to send a notification if any changes happened to the Roles in IIQ.

In your Audit Configuration options, you can enable it for these events. Then you can use Advanced Analytics to search for the Audit events.

Hello @sunilasm Yes, we can do that by using the plugin below. Please follow the document.

Link: Impact of an assignment rule change

7 Likes

Hi @santhirajumunganda - i have validated the document, looks like the Plugin is created to track the changes on the assignment rule, but we are looking to track the changes such as “Role name”, “Displayname” and “Discriptions”. If any of these are changed a Workitem has to be created asking for approve/reject the changes

@sunilasm we can extend it, but here’s what happens if we change the role name:

Impact:
The role name is the unique identifier of a role in IIQ.
If you change the role name, it’s essentially treated as creating a new role and deleting the old one.

This can cause problems in:

  1. Provisioning policies
  2. Entitlement assignments
  3. Certifications
  4. Role-based policies
  5. Workflows or rules referencing that role by name
  6. Existing identities mapped to the old name might lose associations unless references are updated

Recommendation: Avoid renaming the role name once it’s active. If needed, it’s better to clone and create a new role.

For display name and description, there is no functional impact :grinning_face:

Hope this helps!
Thanks,
Raju

2 Likes

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.