Skip Headers
Oracle® Identity Manager Design Console Guide
Release 9.1.0.2

Part Number E14762-01
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Index
Index
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
View PDF

6 Process Management

This chapter describes process management with the Design Console. It contains the following topics:

6.1 Overview of Process Management

The Process Management folder provides you with tools for creating and managing Oracle Identity Manager processes and e-mail templates.

This folder contains the following forms:

6.2 Email Definition Form

The Email Definition form, as shown in Figure 6-1, is located in the Process Management folder. You use this form to create templates for e-mail notifications. These notifications can be set to be sent to the user when:

Figure 6-1 Email Definition Form

Description of Figure 6-1 follows
Description of "Figure 6-1 Email Definition Form"

You apply e-mail definitions through the Assignment tab of the Process Definition form.

In Figure 6-1, an e-mail definition was created. After the request represented by the Request ID e-mail variable is approved, an e-mail notification is sent from user SOLO to the user who created the request or to the requester.

6.2.1 Specifying the E-Mail Server

Before using the Email Definition form, you must specify the address of the e-mail server that Oracle Identity Manager will use to send e-mail notifications to users.

To specify the e-mail server:

  1. Open the System Configuration form.

  2. Query for the Email Server property, and ensure that it is set to the name of the resource asset instance that represents your e-mail server.

  3. Open the IT Resources form and query for the Email Server IT resource or another name for the resource asset that is associated with your e-mail server.

  4. Once this IT resource is displayed, specify the IP address of the e-mail server and the name and password of the user who validates the usage of this server.

6.2.2 Email Definition Form

Table 6-1 describes the fields of the Email Definition form.

Table 6-1 Fields of the Email Definition Form

Field Name Description

Name

The name of the e-mail definition.

Type

This region contains three options for the following:

  • Whether or not to categorize the e-mail definition as related to a request or a provisioning process

  • Whether or not to associate a variable for the e-mail definition with a request or a provisioning process

  • Whether or not to associate a variable for the e-mail definition with a general process

To classify the e-mail definition as a provisioning definition or to associate the e-mail variable with a provisioning process, select the Provisioning Related option.

To categorize the e-mail definition as a request definition or to associate the e-mail variable with a request, select the Request Related option.

To categorize the e-mail definition as a general announcement, select the General option.

Object Name

From this lookup field, select the resource object that is associated with the provisioning process to which the e-mail definition is related.

Note: Leave this lookup field empty to make the e-mail definition available for use with all resource objects.

Process Name

From this lookup field, select a provisioning process that was assigned to the selected resource object. This is the provisioning process to which the e-mail definition is to be related.

Note: If the Provisioning Related option is not selected, both the Object Name and Process Name lookup fields are grayed out.

Language

From this lookup field, select the language that is associated with the e-mail definition.

Region

From this lookup field, select the region that is associated with the language in the e-mail definition.

Targets

Select the source of the variable for the e-mail definition. For example, if the variable you want to select were Request Name, the source to select will be Request Information.

Note: The items that are displayed in this box reflect the options you selected from the Type region.

Variables

From this box, select the variable for the e-mail definition (for example, Request Name). The variables, which are displayed in this box, reflect the items you selected from the Targets box.

Note: For more information about e-mail variables and their parameters, see Oracle Identity Manager Reference

From

Currently, two types of users can be selected from this box:

  • Requester: The user who created the request.

  • User: Any Oracle User with an e-mail address, which is displayed in the Contact Information tab of their Users form.

User Login

The ID of the user in the From region of the e-mail notification.

Note: If the User item is not displayed in the From box, the User Login field is grayed out.

Subject

The title of the e-mail definition.

Body

The content of the e-mail definition.


6.2.3 Creating an E-Mail Definition

To create an e-mail definition:

  1. Open the Email Definition form.

  2. In the Name field, enter the name of the e-mail definition.

  3. If the e-mail definition is to be used with a provisioning process, select the Provisioning Related option. When the e-mail definition is to be associated with a request, select the Request Related option.

    Note:

    If the Request Related option is selected, ensure that the name of the e-mail server is displayed in the Value field of the Email Server property on the System Configuration form.
  4. Double-click the Language lookup field, and select a language to associate with this e-mail definition.

  5. Double-click the Region lookup field, and select a region to associate with the e-mail definition language.

    Note:

    E-mail notification is based on the locale that was specified when you first installed Oracle Identity Manager.
  6. Click Save.

    The remaining data fields of the Email Definition form are now operational.

  7. To associate this e-mail definition with a particular resource object, double-click the Object Name lookup field in the Lookup dialog box. Then, select the resource object that is associated with the provisioning process to which this e-mail definition is related.

    Leave this lookup field empty to make the e-mail definition available for use with all resource objects.

  8. Double-click the Process Name lookup field.

    From the Lookup dialog box, select a provisioning process that is assigned to the resource object you selected in Step 7. This is the provisioning process to which this e-mail definition is to be related.

    Note:

    If the Provisioning Related option is not selected, both the Object Name and Process Name lookup fields are grayed out.
  9. Click the From box.

    From the custom menu that is displayed, select the type of the user (Requester, User, or Manager of Provisioned User) that is displayed in the From region of the e-mail notification.

    Note:

    If the Provisioning Related option is not selected in Step 3, the Manager of Provisioned User item will not be displayed in the From box.
  10. Optional. If you have selected the User option in the From box, double-click the User Login lookup field.

    From the Lookup dialog box, select the user ID that is displayed in the From region of the e-mail notification.

    If you did not select the User item in the From box, the User Login field is grayed out.

  11. Add information in the Subject field.

    This field contains the title of the e-mail definition.

  12. Add information in the Body text area.

    This text area contains the contents of the e-mail definition.

  13. When necessary, populate the Subject field and Body text area with e-mail variables.

    The following table describes the e-mail variables that you can customize for the e-mail definition.

    Name Description
    Type These options specify whether or not a variable for the e-mail definition will be related to a provisioning process or a request.

    To associate the e-mail variable with a provisioning process, select the Provisioning Related option. To relate the variable to a request, select the Request Related option.

    Targets From this box, select the source of the variable for the e-mail definition. For example, if you want to use the Request Name variable, the source to select will be Request Information.
    Variables From this box, select the variable for the e-mail definition, for example, Request Name.

    Note:

    The items that are displayed in the custom menu of the Targets box reflect the selection of either the Provisioning Related or the Request Related radio button. Similarly, the items that are displayed in the custom menu of the Variables box correspond to the items that are displayed in the Targets, Location Types, and Contact Types boxes.
  14. Create an e-mail variable for the Subject field or Body text area.

    email variable.
    Description of the illustration email2.gif

    For this example, the number of the request that was approved (the Request ID) is displayed in both the Subject field and the Body text area.

  15. Click Save.

    The e-mail definition is created.

6.3 Process Definition Form

A process is the mechanism for representing a logical workflow for approvals or provisioning in Oracle Identity Manager. Process definitions consist of tasks. Process tasks represent the steps that you must complete to fulfill the purpose of a process. For example, in an approval process, the tasks can represent individual approvals that are required for an action to take place. In a provisioning process, tasks are used to enable a user or organization to access the target resource.

The Process Definition form shown in Figure 6-2 is in the Process Management folder. You use this form to create and manage the approval and provisioning processes that you associate with your resource objects.

Note:

You can also use this form to manage the standard approval process associated with the Request object.

Figure 6-2 Process Definition Form

Process Definition Form
Description of "Figure 6-2 Process Definition Form"

In Figure 6-2, the Solaris 8 provisioning process is created and assigned to the Solaris 8 resource object.

Table 6-2 describes the fields of the Process Definition form.

Table 6-2 Fields of the Process Definition Form

Field Name Description

Name

The name of the process.

Type

The classification type of the process definition. A process definition can be categorized as an Approval or a Provisioning process.

Object Name

The name of the resource object to which the process will be assigned.

Map Descriptive Field

Click this button to select a field that will be used as an identifier of the process definition after an instance is assigned to a resource object.

Render Workflow

Click this button to start a Web browser and display the current workflow definition by using the Workflow Renderer tool.

Default Process

This check box determines if the current process is the default approval or provisioning process for the resource object with which it is associated.

Select the check box to set the process as the default approval or provisioning process for the resource object to which it is assigned. If you deselect the check box, the process will not be the default. It will only be invoked if a process selection rule causes it to be chosen.

Auto Save Form

This check box designates whether Oracle Identity Manager suppresses the display of the custom form associated with this provisioning process or display it and allow a user to supply it with data each time the process is instantiated.

Select this check box to automatically save the data in the custom process form without displaying the form. If you select this check box, then you must supply either system-defined data or ensure that an adapter is configured to populate the form with the required data because the user will not be able to access the form. Deselect this check box to display the custom process form and allow users to enter data into its fields.

Auto Pre-Populate

This check box designates whether the fields of a custom form are populated by Oracle Identity Manager or a user. Two types of forms are affected:

  • Forms that are associated with the process

  • Forms that contain fields with prepopulated adapters attached to them

If the Auto Pre-Populate check box is selected, when the associated custom form is displayed, the fields that have prepopulate adapters attached to them will be populated by Oracle Identity Manager.

When this check box is deselected, a user must populate these fields by clicking the Pre-Populate button on the toolbar or by manually entering the data.

Note: This setting does not control the triggering of the prepopulate adapter. It only determines if the contents resulting from the execution of the adapter are displayed in the associated form field(s) because of Oracle Identity Manager or a user.

For more information about prepopulate adapters, see Oracle Identity Manager Tools Reference.

Note: This check box is only relevant if you have created a process form that is to be associated with the process and prepopulate adapters are used with that form.

Table Name

The name of the table that represents the form that is associated with the process definition.


6.3.1 Creating a Process Definition

To create a process definition:

  1. Open the Process Definition form.

  2. In the Name field, type the name of the process definition.

  3. Double-click the Type lookup field.

    From the Lookup dialog box that is displayed, select the classification type (Approval or Provisioning) of the process definition.

  4. Double-click the Object Name lookup field.

    From the Lookup dialog box that is displayed, select the resource object that will be associated with the process definition.

  5. Optional. Select the Default Process check box to make this the default approval or provisioning process for the resource object to which it is assigned.

    If you do not want the current process definition to be the default, go to Step 6.

  6. Optional. Select the Auto Save Form check box to suppress the display of the provisioning process' custom form and automatically save the data in it.

    This setting is only applicable to provisioning processes.

    To display provisioning process' custom form and solicit users for information, deselect this check box.

    Note:

    If you select the Auto Save Form check box, ensure that all fields of the associated "custom" process form have adapters associated with them. However, a process form can have default data or object to the process data flow mapping or organization defaults.

    For more information about adapters and their relationship with fields of custom forms, see Oracle Identity Manager Tools Reference.

  7. If a custom form is to be associated with the process definition, this form contains fields that have prepopulate adapters attached to them, and you want these fields to be populated automatically by Oracle Identity Manager, select the Auto Pre-Populate check box.

    If the fields of this form are to be populated manually (by an user clicking the Pre-Populate button on the Toolbar), deselect the Auto Pre-Populate check box.

    Note:

    If the process definition has no custom form associated with it, or this form's fields have no pre-populate adapters attached to them, deselect the Auto Pre-Populate check box. For more information about prepopulate adapters, see Oracle Identity Manager Tools Reference.
  8. Double-click the Table Name lookup field.

    From the Lookup window that is displayed, select the table that represents the form associated with the process definition.

  9. Click Save.

    The process definition is created and the Map Descriptive Field button is enabled. If you click this button, the Map Descriptive Field dialog box is displayed.

    From this window, you can select the field (for example, the Organization Name field) that will be used as an identifier of the process definition when an instance of the process is assigned to a resource object. This field and its value will then be displayed in the Reconciliation Manger form.

    See Also:

    If a process has a custom process form attached to it, the fields on that form will also be displayed in this window and be available for selection.
  10. Click the Render Workflow button to view your workflow definition in a graphical presentation.

    The Workflow Renderer is a powerful tool in helping you develop your process definition.

    Note:

    See Oracle Identity Manager Administrative and User Console Guide for detailed information about how to use the Workflow Definition Renderer

6.3.2 Tabs on the Process Definition Form

After you start the Process Definition form and create a process definition, the tabs of this form become functional.

The Process Definition form contains the following tabs:

Each of these tabs is described in the following sections.

6.3.2.1 Tasks Tab

You use this tab to:

  • Create and modify the process tasks that comprise the current process definition

  • Remove a process task from the process definition (when it is no longer valid)

Figure 6-3 displays the Tasks tab of the Process Definition form.

Figure 6-3 Tasks Tab of the Process Definition Form

Task tab of the Process Definition Form
Description of "Figure 6-3 Tasks Tab of the Process Definition Form"

For example, the Solaris 8 process definition can consist of 15 process tasks.

See Also:

See "Modifying Process Tasks" for information about editing process tasks
6.3.2.1.1 Adding a Process Task

Process tasks represent the steps that you must complete in a process.

To add a process task:

  1. Click Add.

    The Creating New Task dialog box is displayed.

  2. In the Task Name field, enter the name of the process task.

  3. From the Toolbar of the Creating New Task window, click Save. Then, click Close.

    The process task is added to the process definition.

6.3.2.1.2 Editing a Process Task

For instructions about how to edit and set process tasks, see "Modifying Process Tasks".

6.3.2.1.3 Deleting a Process Task

To delete a process task:

  1. Select the process task that you want to delete.

  2. Click Delete.

    The process task is removed from the process definition.

6.3.2.2 Data Flow Tab

You use this tab to define the data flow between the following items:

  • The fields of a parent resource form that is attached to a resource object definition and the fields of a parent process form that is attached to a provisioning process definition

  • The fields of a parent resource form and the fields of a child of the parent process form

  • The fields of a child resource form and the fields of a child process form

This tab is relevant only if parent resource and process objects have custom resource forms attached to them.

Figure 6-4 shows the data flow tab of the Process Definition form.

Figure 6-4 Data Flow Tab of the Process Definition Form

Data flow tab of the Process Definition Form
Description of "Figure 6-4 Data Flow Tab of the Process Definition Form"

To map the flow of data between the fields of a parent resource form and a child process form, or between the fields of a child resource form and a child process form, you must assign a child resource form to the custom resource form, and assign a child process form to the custom process form.

See Also:

See "Form Designer Form" for more information about editing process tasks

After you define a resource object form for the parent resource object and a process form for the parent provisioning process and assign child forms to each form, you can establish mappings between the form fields, with two restrictions. Field values on the process form cannot be mapped back to resource form fields, and field values on a child resource form cannot be mapped to fields in the parent process form.

Figure 6-4, shows two data flows:

  • For the first data flow, the value of the Home Directory field of the Solaris parent resource form is mapped to the User's Home Directory field of the Solaris parent process form.

  • For the second data flow, the values of the Solaris child resource form are mapped to the appropriate fields of the Solaris child process form.

The following sections describe how to map the following:

  • A parent resource form field to a parent process form field

  • A parent resource form field to a child process form field

  • A child resource form field to a child process form field

The following also describes how to break the mapping between two data fields.

6.3.2.2.1 Mapping a Parent Resource Form Field to a Process Form Field

To map the data field of a Parent Resource form to a data field of a Process form:

  1. Click Add Field Map.

    The Define Data Flow dialog box is displayed.

  2. From the Data Source box, select the desired data field of the parent resource form.

  3. From the Data Sink box, select the target data field of the parent or child process form.

  4. From the window's Toolbar, click Save, then click Close.

    The selected data field of the parent resource form is now mapped to the target data field of either the parent or child process form, depending on the selection you made in Step 3.

6.3.2.2.2 Mapping a Child Resource Form Field to Child Process Form Field

To map a data field from a child resource form to a child process form:

  1. Click Add Table Map.

    The Add Data Flow Table Mapping dialog box is displayed.

  2. From the Resource Object Child Table box, select the table names of the child resource form.

  3. From the Process Child Table box, select the target table names of the child process form.

  4. From the window's Toolbar, click Save, and then click Close.

    The selected table names of the child resource form is now mapped to the target table names of the child process form.

  5. Click Add Field Map.

    The Define Data Flow dialog box is displayed.

  6. From the Table Mapping box, select the desired table name of the child resource form.

  7. From the Data Source box, select a data field of the child process form.

  8. From the Data Sink box, select the target data field of the child process form.

6.3.2.2.3 Breaking the Mapping Between Data Fields of a Resource Object and a Process

To break a mapping:

  1. Select the data fields, which contain a mapping you want to break.

  2. Click Delete Map.

    The selected data field of the resource object form is no longer mapped to the selected data field of the process form.

6.3.2.3 Reconciliation Field Mappings Tab

You use the Reconciliation Field Mappings tab shown in Figure 6-5 to define a relationship between data elements in a target system or trusted source and fields in Oracle Identity Manager.

Figure 6-5 Reconciliation Field Mappings Tab of the Process Definition Form

Reconciliation Field Mappings tab
Description of "Figure 6-5 Reconciliation Field Mappings Tab of the Process Definition Form "

Only fields that you define in the Reconciliation Fields tab of the associated resource are available for mapping. Using a reconciliation event, these mappings determine which fields in Oracle Identity Manager to populate with information from the target system. For target resources (not trusted sources), you can use this tab to indicate which fields are key fields. Key fields determine the values that must be same on the process form and the reconciliation event to generate a match on the Processes Matched Tree tab of the Reconciliation Manager form.

For each mapping, the following information is displayed:

  • Name of the field, as defined on the Reconciliation Fields tab of the associated resource, on the target system or trusted source that is to be reconciled with data in Oracle Identity Manager.

  • Data type associated with the field, as defined on the Reconciliation Fields tab of the associated resource.

    Possible values are Multi-Valued, String, Number, Date, and IT resource.

  • For trusted sources: For user discovery, mapping of the data in the trusted source field to the name of a field on the users form, or for organization discovery, mapping of the data in the trusted source field to the name of a field on the Oracle Identity Manager Organizations form.

    If you are performing user and organization discovery with a trusted source, organization discovery must be conducted first.

    See Also:

    See "Multiple Trusted Source Reconciliation" for information about how fields are mapped for multiple trusted source reconciliation
  • For target resources: The name of the field on the resource's custom (provisioning) process form to which the data in the target resources field is to be mapped.

  • For target resources: Indicator designating if the field is a key field in the reconciliation for this target resource.

    For provisioning processes to match a reconciliation event data, the key field values in their process forms must be the same as those in the reconciliation event.

6.3.2.3.1 User Account Status Reconciliation

If you want to configure user account status reconciliation, then you must perform the following:

  • For trusted sources: You must create a reconciliation field, for example, Status, in the corresponding trusted resource object, which denotes the status of the user in the target. The value of this field must be either Active or Disabled. This reconciliation field must be mapped to the user attribute status in the corresponding process definition.

  • For target resources: You must create a reconciliation field, for example, Status, in the corresponding resource object, which denotes the status of the resource in the target. The value of this field must be either Enabled or Disabled. This reconciliation field must be mapped to the process attribute OIM_OBJECT_STATUS in the corresponding process definition.

6.3.2.3.2 Mapping a Target Resource Field to Oracle Identity Manager

You can map the fields on a target resource or trusted source, as defined on the Reconciliation Fields tab of the associated resource definition, to applicable fields in Oracle Identity Manager. These mappings determine the fields that must be updated in Oracle Identity Manager in a reconciliation event. These mappings occur when you click one of the following on the Reconciliation Manager form:

  • The Create User or Create Organization button

  • The Link button on the Matched Users or Matched Organizations tab

  • The Establish Link button on the Processes Matched Tree tab

For user discovery on a trusted source, you define the fields to be mapped from the User resource to fields in the User provisioning process. The fields (that is, the user attributes) to which you will map your trusted source fields are derived from the Users form.

For organization discovery on a trusted source, you define fields to be mapped from the Oracle Identity Manager Organization resource to fields in the Oracle Identity Manager Organization provisioning process. The fields (that is, the organization attributes) to which you will map your trusted source fields are derived from the Organizations form.

After you have accessed the provisioning process definition for the associated resource and selected the Reconciliation Field Mappings tab, use one of the two procedures described in the following sections.

Mapping a Single Value Field

To map a single value field:

  1. Click Add Field Map.

    The Add Reconciliation Field Mappings dialog box is displayed.

  2. Select the field on the target system that you want to map from the menu in the Field Name field.

    Oracle Identity Manager will automatically supply the field type based on what was entered for this field on the associated Resource Object form.

  3. For trusted sources:

    Select a value from the User Attribute menu and click OK. Go to Step 4.

    For target resources:

    Double-click Process Data Field. Select the correct mapping from the Lookup dialog box and click OK.

  4. If you are defining mapping for a trusted source, go to step 5.

    Set the Key Field for Reconciliation Matching check box for target resources only. If this check box is selected, Oracle Identity Manager evaluates if the value of this field on the provisioning process form matches the value of the field in the reconciliation event. All matched processes are displayed on the Processes Matched Tree tab of the Reconciliation Manager form. If this check box is deselected, Oracle Identity Manager does not require the value of this field to match the process form and reconciliation event for process matching.

    Note:

    To set a field as a key field, it must be set as required on the Object Reconciliation tab of the applicable resource.
  5. Click Save.

    The mapping for the selected fields is applied the next time a reconciliation event is received from the target resource or trusted source.

Mapping a Multi-Value Field (For Target Resources Only)

To map a multi-value field:

  1. Click Add Table Map.

    The Add Reconciliation Table Mappings dialog box is displayed.

  2. Select the multi-value field on the target system that you want to map from the menu in the Field Name field.

    Oracle Identity Manager will automatically supply the field type based on what was entered for this field on the associated Resource Object form.

  3. Select the child table you defined on the target resource's process form from the Table Name menu.

  4. Double-click Process Data Field, and select the correct mapping from the Lookup dialog box, and click OK.

  5. Save and close the Add Reconciliation Table Mappings dialog box.

  6. Right-click the multi-value field you just mapped, and select Define a property field map from the menu that is displayed.

  7. Select the component (child) field you want to map.

    Oracle Identity Manager will automatically supply the field type based on what was entered for this field on the associated Resource Object form.

  8. Double-click the Process Data Field field.

    Select the correct mapping from the Lookup dialog box and click OK.

  9. Set the Key Field for Reconciliation Matching check box.

    If this check box is selected, Oracle Identity Manager compares the field value on the provisioning process child form with the field value in the reconciliation event. All matching processes are displayed on the Processes Matched Tree tab of the Reconciliation Manager form. If you deselect this check box, the value of this field does not have to match on the process form and reconciliation event for process matching. Ensure that at least one component (child) field of each multi-valued field is set as a key field. This improves the quality of the matches generated on the Process Matched Tree tab.

    Note:

    Key fields must be set as required on the Object Reconciliation tab of the applicable resource.
  10. Repeat Steps 6 through 9 for each component (child) field defined on the multi-value field.

  11. Click Save.

    The mapping for the selected fields will be applied the next time a reconciliation event is received from the target resource.

6.3.2.3.3 Deleting a Mapping

This procedure is used to delete a mapping that has been established between a field in Oracle Identity Manager and a field on the target system or trusted source as defined on the Reconciliation Fields tab of the associated resource definition.

To delete a mapping:

  1. Go to the provisioning process definition for the associated resource.

  2. Select the Reconciliation Field Mappings tab.

  3. Select the field mapping you want to delete.

  4. Click Delete Map.

    The mapping for the selected field is deleted.

6.3.2.4 Administrators Tab

You use this tab to select the user groups that can view, modify, and delete the current process definition.

On this tab, when the Write check box is selected, the corresponding user group can read and modify the current process definition. When the Delete check box is selected, the associated user group can delete the current process definition.

For example, a SYSTEM ADMINISTRATORS user group can be configured to view, modify, and delete the Solaris 8 process definition.

6.3.2.4.1 Assigning a User Group to a Process Definition

To assign a user group:

  1. Click Assign.

    The Groups window is displayed.

  2. Select the unassigned group, and assign it to the process definition.

  3. Click OK.

    The user group is displayed in the Administrators tab.

  4. To enable this user group to view or modify, or view and modify the current process definition, double-click the corresponding Write check box. Otherwise, go to Step 5.

  5. To enable this user group to delete the current process definition, double-click the associated Delete check box. Otherwise, go to Step 6.

  6. Click Save.

    The user group is assigned to the process definition.

6.3.2.4.2 Removing a User Group From a Process Definition

To remove a user group:

  1. Highlight the user group that you want to remove.

  2. Click Delete.

    The user group is removed from the process definition.

6.3.3 Modifying Process Tasks

To modify a process task for a process definition, double-click its row heading. The Editing Task window is displayed, containing additional information about the process task.

The Editing Task window contains the following tabs:

6.3.3.1 General Tab

You use this tab to set high-level information for the task that you want to modify. For this example, the Create User task is used to create a user in the Solaris environment.

Figure 6-6 shows the General tab of the Editing Task dialog box.

Figure 6-6 General Tab of the Editing Task Dialog Box

General Tab of the Editing Task Window
Description of "Figure 6-6 General Tab of the Editing Task Dialog Box"

Table 6-3 describes the fields of the General tab.

Table 6-3 Fields of the General Tab of the Editing Task Dialog Box

Field Name Description

Task Name

The name of the process task.

Task Description

Explanatory information about the process task.

Duration

The expected completion time of the current process task in days, hours, and minutes.

Conditional

This check box determines if a condition is met to add the current process task to the process.

Select this check box to prevent the process task from being added to the process unless a condition has been met.

Clear this check box to not require the condition to be met for the process task to be added to the process.

Required for Completion

This check box determines if the current process task must be completed for the process to be completed.

Select this check box to require the process task to have a status of Completed before the process can be completed.

Deselect this check box to ensure that the status of the process task does not affect the completion status of the process.

Constant Duration

Not applicable

Task Effect

From this box, select the process action you want to associate with the task, for example, disable or enable. A process can enable or disable a user's access to a resource. When the disable action is chosen, all tasks associated with the disable action are inserted.

Note: If you do not want the process task to be associated with a particular process action, select NONE from the box.

Disable Manual Insert

This check box determines if a user can manually add the current process task to the process.

Select this check box to prevent the process task from being added to the process manually.

Deselect this check box to enable a user to add the process task to the process.

Allow Cancellation while Pending

This check box determines if the process task can be canceled if its status is Pending.

Select this check box to allow the process task to be canceled if it has a Pending status.

Deselecting this check box to prevent the process task from being canceled if its status is Pending.

Allow Multiple Instances

This check box determines if the process task can be inserted into the current process more than once.

Select this check box to enable multiple instances of the process task to be added to the process.

Deselect this check box to enable the process task to be added to the current process only once.

Retry Period in Minutes

If a process task is rejected, this field determines the interval before Oracle Identity Manager inserts a new instance of that task with the status of Pending.

In Figure 6-6, 30 is displayed in the Retry Period in Minutes field. If the Create User process task is rejected, in 30 minutes Oracle Identity Manager adds a new instance of this task and assigns it a status of Pending.

Retry Count

Determines how many times Oracle Identity Manager retries a rejected task. In Figure 6-6, 5 is displayed in the Retry Count field. If the Create User process task is rejected, Oracle Identity Manager adds a new instance of this task, and assigns it a status of Pending. When this process task is rejected for the fifth time, Oracle Identity Manager no longer inserts a new instance of it.

Child Table/ Trigger Type

These boxes specify the action that Oracle Identity Manager performs in the child table of a custom form that is associated with the current process, as indicated by the Table Name field of the Process Definition form.

From the Child Table box, select the child table of the custom form where Oracle Identity Manager will perform an action.

From the Trigger Type box, specify the action that Oracle Identity Manager is to perform in the child table. These actions include:

  • Insert. Adds a new value to the designated column of the child table

  • Update. Modifies an existing value from the corresponding column of the child table

  • Delete. Removes a value from the designated column of the child table

Note: If the custom process form does not have any child tables associated with it, the Child Table box will be empty. In addition, the Trigger Type box will be grayed out.


6.3.3.1.1 Modifying a Process Task's General Information

To modify the general information for a process task:

  1. Double-click the row heading of the task you want to modify.

    The Editing Task dialog box is displayed.

  2. Click the General tab.

  3. In the Description field, enter explanatory information about the process task.

  4. Optional. In the Duration area, enter the expected completion time of the process task (in days, hours, and minutes).

  5. If you want a condition to be met for the process task to be added to the Process Instance, select the Conditional check box. Otherwise, go to Step 6.

    Note:

    If you select the Conditional check box, you must specify the condition to be met for the task to be added to the process.
  6. When you want the completion status of the process to depend on the completion status of the process task, select the Required for Completion check box.

    By doing so, the process cannot be completed if the process task does not have a status of Completed.

    If you do not want the status of the process task to affect the completion status of the process, go to Step 7.

  7. To prevent a user from manually adding the process task into a currently running instance of the process, select the Disable Manual Insert check box. Otherwise, go to Step 8.

  8. To enable a user to cancel the process task if its status is Pending, select the Allow Cancellation while Pending check box. Otherwise, go to Step 9.

  9. To allow this task to be inserted multiple times in a single process instance, select the Allow Multiple Instances check box. Otherwise, go to Step 10.

  10. Click the Task Effect box.

    From the custom menu that is displayed, select one of the following:

    • Enable Process or Access to Application. If a resource is reactivated by using the enable function, then all tasks with this effect are inserted into the process. If you select this option, you must also select the Allow Multiple Instances check box.

    • Disable Process or Access to Application. If a resource is deactivated by using the disable function, all tasks with this effect are inserted into the process. If you select this option, you must also select the Allow Multiple Instances check box.

    • No Effect. This is the default process action associated with all tasks. If this option is selected, the task is only inserted during normal provisioning unless it is conditional.

  11. Optional. If the process task is Rejected, you might want Oracle Identity Manager to insert a new instance of this process task (with a status of Pending).

    For this to occur, enter a value in the Retry Period in Minutes field. This designates the time in minutes that Oracle Identity Manager waits before adding this process task instance.

    In the Retry Count field, enter the number of times Oracle Identity Manager will retry a rejected task. For example, suppose 3 is displayed in the Retry Count field. If the task is rejected, Oracle Identity Manager adds a new instance of this task, and assigns it a status of Pending. After this process task is rejected for the fourth time, Oracle Identity Manager no longer inserts a new instance of the process task.

    Note:

    If either Retry Period or Retry Count is selected, you must specify parameters for the other option because they are both related.
  12. From the Child Table box, select the child table of the custom form where Oracle Identity Manager will perform an action.

    From the Trigger Type box, specify the action that Oracle Identity Manager will perform in the child table. These actions include the following:

    • Insert: Adds a new value to the designated column of the child table

    • Update: Modifies an existing value from the corresponding column of the child table

    • Delete: Removes a value from the designated column of the child table

    Note:

    If the custom process form does not have any child tables associated with it, the Child Table box will be empty. In addition, the Trigger Type box will be grayed out.
  13. Click Save.

    The modifications to the process task's top-level information reflects the changes you made in the General tab.

6.3.3.2 Integration Tab

By using the Integration tab, you can:

  • Automate a process task by attaching an event handler or task adapter to it.

  • Map the variables of the task adapter, so Oracle Identity Manager can pass the appropriate information when the adapter is triggered. This occurs when the process task's status is Pending.

  • Break the link between the adapter handler and the process task, once the adapter or event handler is no longer applicable with the process task.

For example, suppose that the adpSOLARISCREATEUSER adapter is attached to the Create User process task. This adapter has nine adapter variables, all of which are mapped correctly as indicated by the Y that precedes each variable name.

Note:

Event handlers are preceded with tc, such as tcCheckAppInstalled. These are event handlers that Oracle provides. Customer-created event handlers cannot have a tc prefix in their name. Adapters are preceded with adp, for example, adpSOLARISCREATEUSER.

See Also:

See "Adapter Factory Form" and "Event Handler Manager Form" for more information about adapters and event handlers
6.3.3.2.1 Assigning an Adapter or Event Handler to a Process Task

The following procedure describes how to assign an adapter or event handler to a process task.

Important:

If you assign an adapter to the process task, the adapter will not work until you map the adapter variables correctly. See "Mapping Adapter Variables" for details.

To assign an adapter or event handler to a process task:

  1. Double-click the row heading of the process task to which you want to assign an event handler or adapter.

    The Editing Task window is displayed.

  2. Click the Integration tab.

  3. Click Add.

    The Handler Selection dialog box is displayed, as shown in Figure 6-7.

  4. To assign an event handler to the process task, select the System option.

    To add an adapter to the process task, select the Adapter option. A list of event handlers or adapters, which you can assign to the process task, is displayed in the Handler Name region.

    Figure 6-7 Handler Selection Dialog Box

    Handler Selection Window
    Description of "Figure 6-7 Handler Selection Dialog Box"

  5. Select the event handler or adapter that you want to assign to the process task.

  6. From the Handler Selection window's Toolbar, click Save.

    A confirmation dialog box is displayed.

  7. Click OK.

    The event handler or adapter is assigned to the process task.

6.3.3.2.2 Mapping Adapter Variables

See Also:

Oracle Identity Manager Tools Reference for more information about the items to select in this procedure

Note:

To trigger a task associated with a change to a parent form field, the name of the task must be field Updated, where field is the name of the parent form field. If the task is not named according to this convention, it is not triggered during a field update.

To map an adapter variable:

  1. Select the adapter variable that you want to map.

  2. Click Map.

    The Data Mapping for Variable window is displayed.

  3. Complete the Map To, Qualifier, IT Asset Type, IT Asset Property, Literal Value, and Old Value fields.

  4. From the Data Mapping for Variable window's Toolbar, click Save.

  5. Click Close.

    The mapping status for the adapter variable changes from N to Y. This indicates that the adapter variable has been mapped.

6.3.3.2.3 Removing an Adapter or Event Handler from a Process Task

To remove an adapter or event handler from a process task:

  1. Click Remove.

    A confirmation dialog box is displayed.

  2. Click OK.

    The event handler or adapter is removed from the process task.

6.3.3.3 Task Dependency Tab

You use the Task Dependency tab to determine the logical flow of process tasks in a process. Through this tab, you can:

  • Assign preceding tasks to a process task.

    These tasks must have a status of Completed before Oracle Identity Manager or a user can trigger the current process task.

  • Assign dependent tasks to a process task.

    Oracle Identity Manager or a user can trigger these tasks only after the current process task has a status of Completed.

  • Break the link between a preceding task and the current task so that the preceding task's completion status no longer has any effect on the current task being triggered.

  • Break the link between the current task and a dependent task so that the current task's completion status no longer has any bearing on triggering the dependent tasks.

For example, the Create User process task does not have any preceding tasks. Oracle Identity Manager triggers this task whenever the task is inserted into a process (for example, when an associated resource is requested). The Create User process task has seven dependent tasks. Before completion of this process task, each dependent task will have a status of Waiting. Once this task achieves a status of Completed, each of these process tasks are assigned a status of Pending, and Oracle Identity Manager can trigger them.

6.3.3.3.1 Assigning a Preceding Task to a Process Task

To assign a preceding task to a process task:

  1. Double-click the row heading of the process task to which you want to assign a preceding task.

    The Editing Task window is displayed.

  2. Click the Task Dependency tab.

  3. From the Preceding Tasks region, click Assign.

    The Assignment window is displayed.

  4. From this window, select the preceding task, and assign it to the process task.

  5. Click OK.

    The preceding task is assigned to the process task.

6.3.3.3.2 Removing a Preceding Task from a Process Task

To remove a preceding task from a process task:

  1. Select the preceding task that you want to delete.

  2. From the Preceding Tasks region, click Delete.

    The preceding task is removed from the process task.

6.3.3.3.3 Assigning a Dependent Task to a Process Task

To assign a dependent task to a process task:

  1. Double-click the row heading of the process task to which you want to assign a dependent task.

    The Editing Task window is displayed.

  2. Click the Task Dependency tab.

  3. From the Dependent Tasks region, click Assign.

    The Assignment window is displayed.

  4. From this window, select the dependent task, and assign it to the process task.

  5. Click OK.

    The dependent task is assigned to the process task.

6.3.3.3.4 Removing a Dependent Task from a Process Task

To remove a dependent task from a process task:

  1. Select the dependent task that you want to delete.

  2. From the Dependent Tasks region, click Delete.

    The dependent task is removed from the process task.

6.3.3.4 Responses Tab

You use the Responses tab to do the following:

  • Define the response codes that can be received in conjunction with the execution of a particular process tasks. You can use response codes to represent specific conditions on the target system.

  • Define the conditional tasks that are started if a response code is received during execution of this process task. These tasks are called generated tasks.

  • Remove a response from a process task.

  • Remove a generated task from a process task.

For example, when a Create User process task is completed, the SUCCESS response is activated. This response displays a dialog box with the message "The user was created successfully." In addition, Oracle Identity Manager triggers the Enable User process task.

Note:

By default, the UNKNOWN response is defined for each process task that is rejected. This way, even when the system administrator does not add any responses to a process task, if this task is rejected, the user will be notified in the form of an error message in a dialog box.
6.3.3.4.1 Adding a Response to a Process Task

To add a response to a process task:

  1. Double-click the row heading of the process task to which you want to add a response.

    The Editing Task window is displayed.

  2. Click the Responses tab.

  3. In the Responses region, click Add.

    A blank row is displayed in the Responses region.

  4. Enter information in the Response field.

    This field contains the response code value. This field is case-sensitive.

  5. Enter information in the Description field. This field contains explanatory information about the response.

    If the process task triggers the response, this information is displayed in the task information dialog box.

  6. Double-click the Status lookup field.

    From the Lookup window that is displayed, select a task status level. If the response code is received, it will cause the task to be set to this status.

  7. Click Save.

    The response you added would now reflect the settings you have entered.

6.3.3.4.2 Removing a Response from a Process Task

To remove a response from a process task:

  1. Select the response that you want to delete.

  2. From the Responses region, click Delete.

    The response is removed from the process task.

    Note:

    You will not be able to delete a response from a process task that is invoked for any provisioning instance, even if the response is existing or is newly added. However, if the process task is not invoked for any provisioning instance, you will be able to delete the response.
6.3.3.4.3 Assigning a Generated Task to a Process Task

To assign a generated task to a process task:

  1. Double-click the row heading of the process task to which you want to assign a generated task.

    The Editing Task window is displayed.

  2. Click the Responses tab.

  3. Select the response code for which you want to assign generated tasks.

  4. From the Tasks to Generate region, click Assign.

    The Assignment window is displayed.

  5. From this window, select the generated task, and assign it to the process task response.

  6. Click OK.

    The generated task is assigned to the process task.

6.3.3.4.4 Removing a Generated Task From a Process Task

To remove a generated task from a process task:

  1. Select a response code.

  2. Select the generated task that you want to delete.

  3. From the Tasks to Generate region, click Delete.

    The generated task is removed from the process task.

6.3.3.5 Undo/Recovery Tab

You use the Undo/Recovery tab for the following:

  • To define process tasks that are triggered when the current process task is canceled. These process tasks are known as undo tasks.

  • To remove an undo task from a process task, when it is no longer valid.

  • To define process tasks that are triggered when the current process task is rejected. These tasks are called recovery tasks.

  • To remove a recovery task from a process task.

For example, if the Create User process task has a Cancelled status, then the Delete User undo task is triggered. Similarly, if the Create User task is Rejected, Oracle Identity Manager triggers the Enable User recovery task.

Note:

When the current process task is rejected, Oracle Identity Manager triggers recovery tasks that are assigned to the process task. If you select the Complete on Recovery check box, Oracle Identity Manager changes the status of the current process task from Rejected to Unsuccessfully Completed upon completion of all recovery tasks that are generated. This enables Oracle Identity Manager to trigger other dependent process tasks.

The following sections describe how to assign an undo and recovery task to the current process task, and how to remove an undo and recovery task from the current process task.

6.3.3.5.1 Assigning an Undo Task to a Process Task

To assign an undo task to a process task:

  1. Double-click the row heading of the process task to which you want to assign an undo task.

    The Editing Task window is displayed.

  2. Click the Undo/Recovery tab.

  3. In the Undo Tasks region, click Assign.

    The Assignment window is displayed.

  4. From this window, select the undo task, and assign it to the process task.

  5. Click OK.

    The undo task is assigned to the process task.

6.3.3.5.2 Removing an Undo Task From a Process Task

To remove an undo task from a process task:

  1. Select the undo task that you want to delete.

  2. From the Undo Tasks region, click Delete.

    The undo task is removed from the process task.

6.3.3.5.3 Assigning a Recovery Task to a Process Task

To assign a recovery task to a process task:

  1. Double-click the row heading of the process task to which you want to assign a recovery task.

    The Editing Task window is displayed.

  2. Click the Undo/Recovery tab.

  3. From the Recovery Tasks region, click Assign.

    The Assignment window is displayed.

  4. From this window, select the recovery task, and assign it to the process task.

  5. Click OK.

    The recovery task is assigned to the process task.

  6. Optional. If you want the status of the current process task to change from Rejected to Unsuccessfully Completed upon completion of all recovery tasks that are generated (so Oracle Identity Manager can trigger other, dependent process tasks) select the Complete on Recovery check box. Otherwise, do not select this check box.

6.3.3.5.4 Removing a Recovery Task from a Process Task

To remove an recovery task from a process task:

  1. Select the recovery task that you want to delete.

  2. From the Recovery Tasks region, click Delete.

    The recovery task is removed from the process task.

6.3.3.6 Notification Tab

You use this tab to designate the e-mail notification to be generated when the current process task achieves a particular status. A separate e-mail notification can be generated for each status a task can achieve. If an e-mail notification is no longer valid, you can remove it from the Notification tab.

For example, when the Create User process task achieves a status of Completed, Oracle Identity Manager sends the Process Task Completed e-mail notification to the user who is to be provisioned with the resource. If the Create User process task is rejected, the Process Task Completed e-mail notification is sent to the user and the user's manager.

Note:

Oracle Identity Manager can only send an e-mail notification to a user if you first create a template for the e-mail message by using the Email Definition form. See "Email Definition Form" for details.

The following sections describe how to assign e-mail notifications to a process task, and remove e-mail notifications from a process task.

6.3.3.6.1 Assigning an E-Mail Notification to a Process Task

To assign an e-mail notification to a process task:

  1. Double-click the row heading of the process task to which you want to assign an e-mail notification.

    The Editing Task dialog box is displayed.

  2. Click the Notification tab.

  3. Click Assign.

    The Assignment dialog box is displayed.

  4. From this window, select the e-mail template definition to use, and assign it to the process task.

  5. Click OK.

    The name of the e-mail notification is displayed in the Notification tab.

  6. Double-click the Status lookup field.

    From the Lookup window that is displayed, select a completion status level. When the process task achieves this status level, Oracle Identity Manager will send the associated e-mail notification.

  7. Select the check boxes that represent the users who will receive the e-mail notification.

    Currently, an e-mail notification can be sent to the following users:

    • Assignee. This user is responsible for completing the associated process task.

    • Requester. This user requested the process that contains the corresponding process task.

    • User. This user will be provisioned with the resource once the associated process task is Completed.

    • User's Manager. This user is the supervisor of the user, who will be provisioned with the resource once the corresponding process task is Completed.

  8. Click Save.

    The e-mail notification is assigned to the process task.

6.3.3.6.2 Removing an E-mail Notification from a Process Task

The following procedure describes how to remove an e-mail notification from a process task.

To remove an e-mail notification from a process task:

  1. Select the e-mail notification that you want to delete.

  2. Click Delete.

    The e-mail notification is removed from the process task.

6.3.3.7 Task to Object Status Mapping Tab

A resource object contains data that is used to provision resources to users and applications. This data includes approval and provisioning processes.

In addition, a resource object is provided with predefined provisioning statuses, which represent the various statuses of the resource object throughout its life cycle as it is being provisioned to the target user or organization. By accessing the Currently Provisioned tab of the Resource Objects form, you can see the provisioning status of that resource object at any time. These values are also displayed in the Object Process Console tab on the Users and Organizations forms.

Note:

Provisioning statuses are defined in the Status Definition tab of the Resource Objects form.

The provisioning status of a resource object is determined by the status of its associated approval and provisioning processes, and the tasks that comprise these processes. For this reason, you must provide a link between the status of a process task and the provisioning status of the resource object to which it is assigned.

The Task to Object Status Mapping tab is used to create this link. Also, when this connection is no longer required, or you want to associate a process task status with a different provisioning status for the resource object, you must break the link that currently exists.

For this example, there are five mappings among process task statuses and provisioning statuses of a resource object. When the Create User process task achieves a status of Completed, the associated resource object will be assigned a provisioning status of Provisioned. However, if this task is canceled, the provisioning status for the resource object will be Revoked. None indicates that this status has no effect on the provisioning status of the resource object.

The following sections describe how to map a process task status to a provisioning status and unmap a process task status from a provisioning status.

6.3.3.7.1 Mapping a Process Task Status to a Provisioning Status

To map an process task status to a provisioning status:

  1. Double-click the row heading of the process task, which has a status that you want to map to the provisioning status of a resource object.

    The Editing Task window is displayed.

  2. Click the Task to Object Status Mapping tab.

  3. Select the desired process task status.

  4. Double-click the Object Status lookup field.

    From the Lookup window that is displayed, select the provisioning status of the resource object to which you want to map the process task status.

  5. Click OK.

    The provisioning status you selected is displayed in the Task to Object Status Mapping tab.

  6. Click Save.

    The process task status is mapped to the provisioning status.

6.3.3.7.2 Unmapping a Process Task Status From a Provisioning Status

To unmap an process task status from a provisioning status:

  1. Select the desired process task status.

  2. Double-click the Object Status lookup field.

    From the Lookup window that is displayed, select None. None indicates that this status has no effect on the provisioning status of the resource object.

  3. Click OK.

    The provisioning status of None is displayed in the Task to Object Status Mapping tab.

  4. Click Save.

    The process task status is no longer mapped to the provisioning status of the resource object.

6.3.3.8 Assignment Tab of the Editing Task Window

This tab is used to specify assignment rules for the current process task. These rules will determine how the process task will be assigned.

Note:

For the most part, task assignment rules are associated with tasks of approval processes because these tasks are usually completed manually. On the other hand, tasks that belong to provisioning processes are usually automated. As a result, they do not need task assignment rules.

For example, if the Create User process task is inserted in the process, then the Solaris Process Tasks - User rule will be evaluated because it has a priority value of 1. If that rule's criteria are satisfied, the task is assigned to the user named RLAVA and the task is marked to escalate in 600,000 milliseconds, or 10 minutes.

If the criteria of the Solaris Process Tasks - User rule are not satisfied, Oracle Identity Manager evaluates the criteria of the Solaris Process Tasks - Group rule. If that rule's criteria are met, the task is assigned to the SYSTEM ADMINISTRATORS user group, and the task is marked to escalate in 10 minutes.

Note:

Only rules with a classification type of Task Assignment can be assigned to a process task. For more information about specifying the classification type of a rule, see "Rule Designer Form". In addition, a Default rule is predefined in Oracle Identity Manager. This rule always evaluates to True. Therefore, it can be used as a safeguard mechanism to ensure that at least one predefined task assignment occurs if all the other rules fail.

Table 6-4 describes the fields of the Assignment tab.

Table 6-4 Fields of the Assignment Tab of the Editing Task Window

Field Name Description

Rule

The name of the Task Assignment rule to evaluate.

Target Type

The classification type of the user or user group that is responsible for completing the current process task. Currently, the process task can be assigned to:

  • User. An Oracle Identity Manager user.

  • Group. A user group.

  • Group User with Highest Priority. The member of the specified user group with the highest priority number.

  • Group User with Least Load. The member of the specified user group with the fewest process tasks assigned.

  • Request Target User's Manager. The supervisor of the user who is being provisioned with the resource.

  • Object Authorizer User with Highest Priority. The member of the user group (designated as an Object Authorizer user group for the resource) with the highest priority number.

  • Object Authorizer User with Least Load. The member of the user group (designated as an Object Authorizer user group for the resource) with the fewest process tasks assigned.

  • Object Administrator. A user group that is defined as an administrator of the associated resource object.

  • Object Administrator User with Least Load. The member of the user group (designated as an Object Administrator user group) with the fewest process tasks assigned.

Note: Object Authorizer and Object Administrator user groups are defined in the Object Authorizers and Administrators tabs, respectively, of the Resource Objects form.

Adapter

This is the name of the adapter. Double-click this field to get a lookup form for all existing adapters.

Adapter Status

This is the status of the adapter.

Group

The user group to which the current process task is assigned.

User

The user to which the current process task is assigned.

Email Unmentioned Email

By selecting an e-mail notification from the Email Name lookup field, and selecting the Send Email check box, Oracle Identity Manager will send the e-mail notification to a user or user group once the current process task is assigned.

Escalation Time

The amount of time (in milliseconds) that the user or user group, which is associated with the rule that Oracle Identity Manager triggers, has to complete the process task. If this process task is not completed in the allotted time, Oracle Identity Manager will then re-assign it to another user or user group. The escalation rule adheres to the order defined by the target type parameter.

Priority

The priority number of the rule that is associated with the current process task. This number indicates the order in which Oracle Identity Manager will evaluate the rule.


The following sections describe adding a task assignment rule to a process task and how to remove it from the process task.

6.3.3.8.1 Adding a Rule to a Process Task

To add a rule to a process task:

  1. Double-click the row heading of the task to which you want to add a rule.

    The Editing Task window is displayed.

  2. Click the Assignment tab.

  3. Click Add.

    A blank row is displayed in the Assignment tab.

  4. Double-click the Rule lookup field.

    From the Lookup window that is displayed, select the rule that you want to add to the process task. Then, click OK.

  5. Double-click the Target Type lookup field.

    From the Lookup window that is displayed, select the classification type of the user or user group (User, Group, Group User with Highest Priority, Group User with Least Load, Request Target User's Manager, Object Authorizer User with Highest Priority, Object Authorizer User with Least Load, Object Administrator, Object Administrator User with Least Load) that is responsible for completing the process task. Then, click OK.

  6. Double-click the Group lookup field.

    From the Lookup window that is displayed, select the user group that is responsible for completing the process task. This setting is only necessary if you selected Group, Group User with Highest Priority or Group User with Least Load in the Target Type field. Then, click OK.

    OR

    Double-click the User lookup field. From the Lookup window that is displayed, select the user who is responsible for completing the process task. This setting is only necessary if you selected User in the Target Type field. Then, click OK.

  7. Double-click the Email Name field.

    From the Lookup window that is displayed, select the e-mail notification that will be sent to the corresponding user or user group once the task is assigned. Click OK. Then, select the Send Email check box.

    If you do not want Oracle Identity Manager to send an e-mail notification when the task is assigned, go to Step 8.

  8. In the Escalation Time field, enter the time (in milliseconds) that the selected user or user group has to complete the process task.

    When you do not want to associate a time limit with the rule you are adding to the process task, leave the Escalation Time field empty, and proceed to Step 10.

  9. In the Priority field, enter the priority number of the rule that you are adding to the process task.

  10. Click Save.

    The rule is added to the process task.

6.3.3.8.2 Removing a Rule from a Process Task

To remove a rule from a process task:

  1. Select the rule that you want to delete.

  2. Click Delete.

    The rule is removed from the process task.