NERM Approval action

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi there,

This is a question to those who have experience with NERM. Basically we have a New Non-Employee & Assignment workflow that we are wanting to implement an approval step for, but seems like there are some limitations. At the organization profile level we define 2 sponsors (by 2 separate select contributor attributes) and 1 manager (by organization specific user role). Now all 3 are contributors of the organization profile.

After we provide a request form in the New Non-employee and Assignment workflow, I want to configure an approval form in which one of the contributors of the organization is the approver. Except the requester is also 1 of the 3 contributors, so simply selecting ‘profiles contributors’ does not work, as the requester also becomes an approver.

It seems like the only option is to create a new user role for each sponsor and manager per organization, and then adding these specific roles as the approver of the form. That would also require adding 3 different conditions per organization which just seems unnecessary.

Anyone have any ideas?

2

I haven’t had a time to test this, but what if you created an attribute with type of user select and allow multiple selections.

Then use a value builder to pull the sponsors / managers.

Go to the approval form and choose from the attribute you created.

3

Thanks for your response! I currently have a profile select attribute defined at the organization level (Select Sponsors). This attribute is referred to for approval when the manager performs the New Non Employee & Assignment workflow. This works well as the approval is sent to all the sponsors in the select sponsor attribute at the organization profile.

The issue is when one of the sponsors makes the request, I want the approval flow to go to the other sponsors or the Manager, and not the requester. I am not sure how I would achieve this using the value builder to pull the other sponsors or manager, but not the requester?