WorkItem Archive Capability

[vic_rinkenberger]

Which IIQ version are you inquiring about?

Version 8.1

Is this question regarding a custom connector? If so, please share relevant details below.

No, this question is not regarding a custom connector.

Share all details related to your problem, including any error messages you may have received.

Hello everyone,

Does anyone know if there is a Capability in IIQ that gives access to the WorkItem Archive? We would like our auditors to have access to that archive so they can do self-service.

Thanks,
Vic

[kavindar_sharma]

Hi @vic_rinkenberger ,

You need to create a custom capability by combining “FullAccessWorkItemReport” and “FullAccessReport” rights which will give access to the Work Item Archive Report. You can follow Rights and Capabilities for more information.

If this answers your question kindly do mark the suitable reply as the solution. If there is anything else which you need to discuss regarding this, do let me know?

[iamksatish (Satish K)]

You will not have administrative OOTB capability to check all archived work item directly in UI like System Administrators , you can give the report access as Kavindar suggested.

[aishwaryagoswami]

Hello Vic, As suggested by Kavinder, you need to create a new capability to access the archived WorkItems.

Do let us know if this works for you and dont forget to mark Kavinder’s response as a solution, if it helped.

[vic_rinkenberger]

I probably should have been a little more clear. I need the auditors to only have Read access to the WorkItem view and the WorkItem Archive view. It would seem that the rights you referenced would give them full access.

Thanks,
Vic

[vic_rinkenberger]

So you are saying that I should give them Report access so that they can run a report to get what they need? Sorry, I wasn’t following what you were saying.

Thanks,
Vic

[Jarin_James]

Hi @vic_rinkenberger,

The Work Item Administrator capability provides the user with access to Work Item Archive Report and also allows the user to view and manage all workItems/workItemArchive objects. Since you mentioned only Read-Only Access is required, as @kavindar_sharma suggested create a Custom Capability by combining “FullAccessWorkItemReport” and “FullAccessReport” rights, something like below

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Capability PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Capability displayName="Workitem Report Access" name="WorkitemReportAccess">
  <Description>capability_desc_workitem_administrator</Description>
  <RightRefs>
    <Reference class="sailpoint.object.SPRight" name="FullAccessWorkItemReport"/>
    <Reference class="sailpoint.object.SPRight" name="FullAccessReport"/>
  </RightRefs>
</Capability>

They will be able to run this report and get the Workitem details.

Alternatively, you can schedule this Work Item Archive Report for a particular frequency and send the Report as email to Auditors.

[Remold (Remold Krol)]

For a full list of all capabilities of IIQ8.1 take a look at the Capabilities Matrix 8.1

As @Jarin_James already showed, it is possible to create your own capability which contains one or multiple rights (OOTH for IIQ8.1 there are 194 different rights).

– Remold