By default, change-approval work items are enabled for all role types. This means that every time a role is changed (whether it is a Business Role, an IT Role, an Application, or an Asset), if the role has an owner, the owner must approve the change in order for the change to be made.
For more information on change-approval and change-notification work items, see Initiating Change-Approval and Approval Work Items.
Use the following steps to enable or disable change-approval and change-notification work items for role types, follow these steps:
Open the Role configuration object for editing using the steps in Editing Identity Manager Configuration Objects.
Locate the role object that corresponds to the role type that you want to edit.
To edit the Business Role, locate Object name=’BusinessRole’
To edit the IT Role, locate Object name=’ITRole’
To edit the Application Role, locate Object name=’ApplicationRole’
To edit the Asset Role, locate Object name=’AssetRole’
Locate the following attributes located in the <Object> element, which is located in the <Attribute name=’features’> element:
<Attribute name=’changeApproval’ value=’true’/> <Attribute name=’changeNotification’ value=’true’/>
Set the attribute values to true or false as needed.
If necessary, repeat steps 2 - 4 to configure another role type.
Save the Role configuration object. You do not need to restart your application servers in order for the changes to take effect.