Update Lifecycle state without giving full admin access

SailPoint Human Fabric (SHF) SHF Discussion and Questions
1

Hi ISC Experts, Is there a way to give certain user level to support team without giving them full admin role to the tenant so that they can update the lifecycle state of the user during emergency termination ?

The goal is when support team receives emergency termination request for any user, they should be able to change the lifecycle state of the user from active to terminated. The emergency termination should be processed within 4 hours.

I know there is a one way to run API commands to set lifecycle state. Looking for a simple and quick solution to avoid giving full admin access to support team. Any leads would be helpful.

2

We built a workflow triggered via an Interactive Form, where users can select one or more identities and submit a termination request.

Once submitted, the workflow:

  1. Validates the identity source
  2. Updates lifecycle state via API
  3. Sends appropriate notifications
  4. Handles errors gracefully
3

ImmediateIdentityTermination.json (7.3 KB)

image
image1645×682 16.4 KB

create a form like these and attach that in above workflow

4

Just create an interactive workflow
Support clicks Run, enters username → workflow sets lifecycleState = terminated.

Gives them only what they need — no admin, quick, and tracked

5

To know more about the interactive workflow, you can go through this document Interactive Process - SailPoint Identity Services

6

Hi @pateldivyang0319,

I’ve implemented similar requirement using interactive forms and workflows.
Please refer to below link for detailed information on the same.

Immediate Termination Workflow - CoLab / Workflows - SailPoint Developer Community

7

Hi @chaithu979 @UjjwalJain @ROHPU Thanks for sharing your feedbacks. In my case, we just wanted Ops team to be able to change the lifecycle state manually from the UI in the event of emergency termination so that ISC dont have to wait for next HR feed.

To solve this, there is one feature called “User Levels” available under Admin->Global-> User Level. It is not available by default in all tenants. We requested that feature from SailPoint and we can set custom user level and assign to any profile without giving any admin rights. In my case the user level is “Set Lifecycle state”. This is the quickest and easiest way for any Ops team to be able to change the lifecycle state during emergency termination instead of going through interactive forms/workflow approach.

image
image1185×420 99.3 KB