Requestee is able to approve their own requests

[rishavghoshacc (Rishav Ghosh)]

Hi all,

I am facing a scenario where a requestee is getting their own request forwarded to themselves as the manager has auto forwarded the item to the requestee. This is causing an issue in audits.

How can we fix this?

Thanks in advance.

[kalyan_dev32 (Pavankalyan Dosa)]

To prevent a requestee from approving their own request in IIQ, you can use any of these Work Item Rules to detect self-approval and forward the work item to someone else.
Navigate to Gear → Global Settings → IdentityIQ Configuration → Work Items and configure any of the following:

• Inactive User Work Item Escalation Rule
• Global Work Item Forwarding Rule
• Self-Certification Work Item Forwarding Rule

For example, in the Global Work Item Forwarding Rule, add logic to compare the work item owner (workItem.getOwner()) with the requester (workItem.getRequester()). If they match, forward it to an alternate approver (e.g., a manager’s manager or a default user or a workgroup). Sample rules and implementation logic can be found in the examplerules.xml file located in your IdentityIQ installation directory:

.../identityiq/WEB-INF/config/examplerules.xml

Hope this helps!