| Oracle® Identity Manager Administrative and User Console Guide Release 9.0 B25936-01 |
|
 Previous |
 Next |
| Oracle® Identity Manager Administrative and User Console Guide Release 9.0 B25936-01 |
|
Previous |
Next |
The approval processes by which requests and their associated resources are approved and made available for provisioning are comprised of tasks. These tasks must be approved by the user to whom they have been assigned before the resources in the request can be provisioned to the target users. In addition, if you have set Oracle Identity Manager to require approvals for self-registration, the approval tasks associated with user's self-registration requests will also appear (and require action by the assigned approver in order to complete the registration process).
If you are an approver for any of the tasks within a request, you will be able to view all tasks in the request but only approve those assigned to you. You can also view pending request(s) to users who you manage.
To approve (or deny) the tasks assigned to you, click Pending Approvals. A list of all requests that contain one or more tasks for which you are an approver will be displayed.
The Open Tasks option are tasks that are defined for the provisioning process. When defining the process using the Process Definition form of the Oracle Identity Manager Design Console, you must specify the type, which is either ÒProvisioningÓ or ÒApprovalÓ. By selecting the Provisioning type, the process is then a provisioning process. Thereby, each resource has one mandatory provisioning process associated with it. Tasks can then be assigned to users.
|
Note: Only users who are task approvers, assigned to provisioning tasks, or administrators of the organizations to which the target users belong will be able to view tasks within a request. |
This section covers the following topics:
To view and complete the tasks assigned to you, click Pending Approvals under To-Do List.
The Pending Approval page appears. You can display all requests that contain tasks to which you are assigned or view request assigned to users that you manage. By default, the page opens with pending request(s) that are Assigned to you. However, you can view pending requests that are assigned to users that you manage. Select the Assigned to user(s) you manage radio button and the page will display the appropriate pending requests.
You can also query for specific requests by using the Search criteria drop-down menu. It includes:
Request ID
Request Type
Requester
Assign To
The Results table has a description of these search criteria. Enter the appropriate value in the corresponding field. The Results table displays the fields described in the following table:
| Field | Description |
|---|---|
| Request ID | This is the request's unique, system-generated identification number. |
| Request Type | The Request Type can be:
Self-Registration Modify Profile Grant/Enable/Disable/Revoke Resources for Users or Organizations. |
| Requester | This is the Oracle Identity Manager user who created the request. |
| Request Preview | This is a summary of the request. The information being displayed includes the User ID or Organization and the resource. |
| Assign To | This the user assigned to approve this request. |
| Approve/Deny | Use this field to select the desired request to either approve or deny it. |
| Reassign | Use this field to select the desired request to be Reassigned to another user or user group. |
To approve a pending request, select on desired checkbox in the Approve/Deny column, then click Approve. When complete, the request ID is removed from the Results table.
To deny a pending request, select on desired checkbox in the Approve/Deny column, then click Deny. When complete, the request ID is removed from the Results table.
To reassign a pending request, select on desired checkbox in the Re-Assign column, then click Re-Assign.The Re-Assign Pending Approvals page appears.
Select the desired checkbox for the user or group you want to re-assign this request to. Click Re-Assign. The Confirm Page appears.
The Open Tasks option displays all open provisioning tasks that are assigned to you or a person that you manage. Use the Open Tasks option to re-try a task if it has a status of rejection, re-assign a provisioning task to another user, or set a response for a provisioning task. This section describes the following tasks:
To view the provisioning tasks assigned to you, click Open Task under To-Do List.
The Open Tasks page appears. You can set the display for this page to show all open tasks that are assigned to you, or the users and the user groups that you manage.
Use the Filter By search criteria to sort the provisioning tasks by the following categories:
Task Name
Task Status
Resource Name
Organization Name
User ID
Resource Type
Assign Before (enter date – yyyy-MM-dd)
Assign After (enter date – yyyy-MM-dd)
Enter the appropriate value in the corresponding field. Then click Go. The Results table will display the appropriate information.
The Results table displays the following information about the provisioning task:
| Field | Description |
|---|---|
| Task Name | This is the name of the task that you have defined in the Process Definition form for this resource name(s). |
| Task Status | Current Status of the resource task. |
| Resource Name | This is the name of the resource associated with this provision task. |
| Resource Type | This is the type of resource defined in the Resource Object form. There are three categories for resource type: Generic, System, and Application |
| Date Assigned | This is the date that the provisioning task was assigned. |
| Assigned To | This is the user name that the provisioning task is assigned to. |
| Re-Try | If the Re-Try checkbox is activated, then it indicates that the Status of the provisioning task was Rejected. Use this checkbox to Re-Try the provisioning task. |
| Re-Assign | Use the Re-Assign checkbox to assign this provisioning task to another user or user group. |
| Set Response | Use the Set Response checkbox to set a response for this provisioning task. |
| Complete Manually | Use the Complete Manually checkbox to manually complete the provisioning task. |
To re-assign an open task to another user, select the desired provisioning task name checkbox(es), then click Re-Assign. The Re-Assign Open Tasks page appears
Select the desired User ID or Group ID (only one user or group can be selected), and then click Re-Assign. The Confirmation page appears.
This page displays the User ID (first name and last name) in the first sentence and the provisioning task (as a bullet item).
If this is correct, click Confirm Re-assign Tasks. Otherwise, click Cancel. The Open Tasks page appears.
Note that the provisioning task that you have re-assigned is no longer in the Results table.
To set response to an open task, select the desired provisioning task name(s) checkbox, then click Set Response. The Specify Task Responses page appears.
Select a response for the provisioning task, then click Set Response(s). Otherwise, click Cancel. The Confirmation page appears.
This page displays the response for this particular provisioning task.
If this is correct, click Confirm Response for Tasks. Otherwise, click Cancel. The Open Tasks page appears.
Note that the provisioning task that you have set response to is no longer in the Results table.
The Attestation option displays all open attestation tasks that are assigned to you. Use the Attestation option to certify, reject, decline, or delegate attestation tasks. This is described in the following sections:
Expand the To-Do List link and click Attestation. The Attestation Request Inbox page appears with a results table that lists your pending attestation process requests. The results table contains the columns listed in the following table:
| Column | Description |
|---|---|
| Process Names | Specifies the name of the process. |
| Process Code | Specifies the code of the process. |
| Data Type | Identifies the type of data being attested. |
| Scope | Indicates whether the attestation scope is by manager, group, organization, or resource. |
| Delegated By | Identifies the user who delegated the task to you. This field is blank if the task was assigned by the attestation process. |
| Current Request | Specifies the date and time on which the attestation task was created. |
To display only records for which actions are not specified already, select the Hide records where action has already been specified option, which is present above the results table.
In the results table on the Attestation Request Inbox page, click the link of the process name that you want to manage. The request page will show the entitlements that the user needs to attest as a part of the task and all the associated details. This is also the page where the reviewer would be able to see the actual details (process form data) of the entitlement that they are supposed to attest. The results table contains the columns listed in the following table:
| Column | Description |
|---|---|
| User | Specifies the whose entitlement is being attested |
| Resource | Specifies the resource for which the entitlement is being attested. The data is a link with pop-up a page that displays the entitlement process form data as it is on the Attestation Date. |
| Descriptive Data | Contains a description of the provisioned resource instance |
| Last Attested | Stores the date and time when this entitlement was last attested |
| Comments | Contains comments that you entered for the entitlement |
| Actions | Contains Certify, Reject, Decline, and Delegate buttons that you select to specify the action for the entitlement |
If desired, select the check box to hide records where action has already been specified.
To view additional rows in the results table, click Next >>.
Follow the procedures in Viewing Attestation Requests to select the attestation process you want to submit.
On the Attestation Request page, select any actions you want to take for the listed entitlements, and then click Save. The Attestation Request >> Save Actions page appears and displays a table listing the entitlements in the current Attestation Request for which you have selected an action. Any entitlements for which you selected an action of "delegate" also allow you to search for a reviewer in the Delegated Reviewer field.
On the Attestation Request >> Save Actions page, enter any desired comments for the listed entitlements or select a reviewer for any entitlements with a value of Delegate in the Reviewer Action column.
The reviewer can provide values for the Default Comment and Default Delegated Reviewer columns. These values are used for all entitlements on a page when a specific value is not provided in the table.
Click Save.
|
Note: Clicking Save does not submit the attestations. To submit attestations, you must follow the procedures in Submitting Attestations. |
Follow the procedures in Viewing Attestation Requests to select the attestation process you want to submit.
Follow the procedures in Saving Attestation Actions to enter comments or select delegated reviewers for any entitlements.
Click Update Existing Comments & Delegation Information. The Attestation Request >> Update Comments and Delegates page appears and displays a table listing the entitlements in the current Attestation Request for which you have selected an action.
In the Attestation Request >> Update Comments and Delegates page, select the check boxes next to the entitlements you want to update. Then, enter any new comments and select a delegated reviewer.
Click Save.
Follow the procedures in Viewing Attestation Requests to select the attestation process you want to submit.
Follow the procedures in Saving Attestation Actions to enter comments or select delegated reviewers for any entitlements.
On the Attestation Request page, click Submit Attestation. The Attestation Request Confirmation page appears.
|
Note: The Submit Attestation button is active only if you have designated an action for each entitlement in the current attestation process request. |
On the Attestation Request Confirmation page, click Submit.
After the task is submitted, it is removed form the attestation inbox.
