[ISC] Workflow Approval Comments Visibility & Assigning Manual Provisioning Tasks to Governance Group

SailPoint Human Fabric (SHF) SHF Discussion and Questions
, , ,
1

Hi everyone,

We are currently configuring Access Requests and Provisioning in Identity Security Cloud (ISC) and have two architectural questions regarding Approvals and Task Manager assignments.

1. Displaying 1st Level Approver’s Comment to 2nd Level Approver in Workflow

  • Scenario: 2-step approval workflow for Access Requests
    • Step 1: Manager Approval
    • Step 2: Governance Group Approval
  • Issue: When the 1st approver (Manager) leaves a comment and approves, the 2nd approver (Governance Group) cannot view this comment in the OOTB Approval UI (‘Comments’ tab).
  • Questions:
    • Is there any OOTB configuration or workaround in ISC to pass and display the 1st approver’s comment to the 2nd approver’s default UI?
    • If not, what is the recommended architecture or workaround in ISC to allow the 2nd approver (Governance Group) to review the 1st approver’s comment before making a decision?

2. Assigning Manual Provisioning/Revocation Tasks (Task Manager) to a Governance Group

  • Scenario: Flat-file / CSV connected sources (Delimited File) where manual fulfillment is required for access grant or revocation.
  • Issue: Currently, manual fulfillment tasks generated during access adjustments are assigned by default to the individual Source Owner.
  • Questions:
    • Is there any native OOTB setting to assign these manual tasks in Task Manager directly to a Governance Group instead of an individual Source Owner?
    • If native assignment to a Governance Group is not supported for Delimited File tasks, what is the recommended workaround (e.g., using Workflow triggers like Provisioning Completed/Access Request to generate a custom Work Item/Form for the group)?

Any insights, best practices, or workarounds would be greatly appreciated!

Thank you.

2

For your second question a new feature was introduced recently to address this. Can you check the following link and see if it addresses your requirement.

https://developer.sailpoint.com/discuss/t/new-capability-manual-task-support-for-governance-groups/223811

3

Hello @jsshin ,

I don’t think there is a OOTB feature to put reviewer 1 comments for reviewer 2 in the UI itself. But as an alternate solution we can send an email to reviewer 2 with comments using list-completed-approvals-v-1 | SailPoint Developer Community API in workflow. In this case reviewer 2 will receive two emails (One for access request OOTB email and other one is custom one for comments from workflow)

image
image713×242 16 KB

For the second question, as link provided by @SanjeevIAM, you just need to configure governance group in base configuration of each source. If governance groups are configured, SailPoint creates the manual tasks for governance groups, if not to source owner