New Capability: Manual Task Support for Governance Groups

Announcements Product News
,
1

:new_button: Enhancement

Manual provisioning tasks can now be assigned to a Governance Group.

:speech_balloon: Aha! Ideas Portal

Allow Assignment of Manual Fulfillment Task to Source Governance Groups (GOV-I-783) is the 11th highest requested feature in the portal, with 266 votes.

Three separate ideas were consolidated into it:

:sparkles: Description

Manual provisioning tasks now go to that source’s Governance Group instead of a single owner. Any member of the group can complete the task, and Identity Security Cloud (ISC) records which member did so.

:red_exclamation_mark: Problem

A manual provisioning task could only be assigned to one person per source. One person rarely handles all provisioning for an application. Customers worked around this by assigning tasks to a shared service account, which hides who actually completed the work, or by moving the workflow out of ISC into another tool. This is most acute on Delimited File sources, the most widely used source type in ISC.

:light_bulb: Solution

An administrator selects a Governance Group on the source. ISC then routes that source’s manual tasks to every member of the group. Any member can complete the task without claiming it first. When one member completes it, ISC closes the task for the rest of the group, so no one duplicates the work. The audit event names the individual member who completed the task. The existing task notifications, Pending Manual Changes, Pending Task Daily Digest, and Task Reassignment, now reach all group members. In the admin task view, a group-assigned task appears as a single row listing everyone assigned.

:busts_in_silhouette: Who is affected?

Customers running manual provisioning on Delimited File and other unconnected sources, where more than one person handles provisioning. This matters most to organizations with many legacy systems modeled as flat file sources, and to any customer that adopted a shared service account to work around the single-owner limit.

:clipboard: Action required

Assign a Governance Group to the source. Sources with no Governance Group keep the current single-owner behavior, so no action is required to stay on today’s behavior.

:date: Important dates

Sandbox availability: Rolling out now
Production rollout: October 12th

:books: Resources

:eyes: Watch out

Manual tasks generated from the old certifications engine are not supported for assignment to governance groups. Tasks created by the next generation certs engine are supported. The next gen certs engine is planned to go GA before end of 2026, with potential holdover campaigns running as long as six months post cutover.

Any tasks generated via the old certs engine will be assigned to the source owner, as they are now.

5 Likes
2

This is absolutely great news! A feature we have been missing since our launch to ISC a year ago. I have many colleagues who will be happy now, making administration of delimited file sources much easier for us, and also allowing us to assign the business owner of the entitlement, without the manual task being assigned to them!

3

This is a great solution for the single-owner bottleneck. Dropping the claim step, restricting the task for the rest of the group, and logging the individual in the audit event are all spot-on

4

Will Request form data be available on the tasks assigned to these Governance Groups members ?

5

Any information currently available to assignees will be available to governance group members. We made no changes to what information is shown in manual tasks.