Oracle® Fusion Middleware User's Guide for Oracle Identity Manager 11g Release 1 (11.1.1) E14316-05 |
|
![]() Previous |
![]() Next |
A User in Oracle Identity Manager can manage Requests by creating, searching, or performing other operations on requests from Oracle Identity Manager Advanced Administration if the user belongs to "REQUEST ADMINISTRATORS" group.
This chapter describes the request management feature in the following sections:
You can log in to Oracle Identity Manager Advanced Administration and create requests for yourself and for others if your role has the appropriate privileges. You can also create requests by using Oracle Identity Manager Self Service.
Creating requests is described with the help of the following scenarios:
To create a request to create a user:
In Oracle Identity Manager Advanced Administration, click the Administration tab, and then click Requests.
From the Actions menu on the left pane, select Create Request. Alternatively, you can also click the Create Request icon on the toolbar. The Select Request Template page of the Create Request wizard is displayed.
Note: The steps in the Create Request wizard are dynamically generated based on the selection of the request template in the first step. |
From the Request Template list, select the request template based on which you want to create the request. The dropdown list shows all the default request templates as well as the custom templates that are created based on the request types. In this example, select Create Contractor, and then click Next.
Note:
|
In the Enter Details page, specify values for the user attributes. The fields for the user attributes are displayed as defined in the Create Contractor request template. For example, the Middle Name attribute is not displayed if you have already specified a value for it at the template level. For the Organization attribute, an LOV is available, whose values are also defined at the template level. For details about specifying these values, see "Creating a Request Template Based on the Create User Request Type".
After specifying values for the user attributes, click Next.
In the Enter Additional Data page, enter the value of the attribute that is specified as additional data in the request template that you are using to create this request. In this example, Date of Birth is specified as an additional attribute in the request template. Enter a value in the Phone Number field, and then click Next.
Note: The Enter Additional Data page is displayed dynamically based on the additional data specified in the request template. |
In the Confirm page, specify values for the Effective Date and Justifications fields. Effective date is the date from which the request will be active after approval. For example, after a create user request is approved, the user is created in Oracle Identity Manager on the date specified in the Effective Date field. The Justification field is a justification for creating the request that might help the approver in approving or rejecting the request.
On clicking Finish, a request to create a user based on the Create Contractor request template is created.
To create a request to provision a resource to one or more users:
Note: The following request types are similar in nature in terms of request creation and execution:
|
In Oracle Identity Manager Advanced Administration, click the Administration tab, and then click the Requests tab.
From the Actions menu on the left pane, select Create Request. The Select Request Template page of the Create Request wizard is displayed. The steps in this wizard are dynamically generated based on the selection of the request template in the first step.
From the Request Template list, select the request type or request template based on which you want to create the request. In this example, select Provision E-Business Resource, and then click Next.
Note: The Provision E-Business Resource request template is not a default request template and is available for selection when a request template with the same name is created based on the privileges you have. For the purpose of this scenario, this request template has been created based on the Provision Resource request type for provisioning an E-Business resource to a user. For information about creating this request template, see "Creating a Request Template Based on the Provisioning Resource Request Type" |
In the Select Users page, specify a search criteria in the fields to search for the users that you want to provision the resource, and then click Search. A list of users that match the search criteria you specified is displayed in the Available Users list.
From the Available Users list, select one or more users to whom you want to provision the resource. You can select one or more users that are your direct reports. In other words, you can select one or more users for whom you are the manager as specified in the user's profiles.
Click Move to include your selection in the Selected Users list, and then click Next.
Note: In this page, available users list is shown based on the OES policies on user entities. The users cannot be restricted from the request template. |
In the Select Resources page, search for the available resources. From the Available Resources list, select the resources that you want to provision, click Move or Move All to include the selected resources in the Selected Resources list. In this example, select E-Business RO as the resource to be provisioned, and then click Next.
Note: Only the E-Business RO resource is displayed in the Selected Resources list because the Provision E-Business Resource request template is created only for provisioning the E-Business resource. The resources are displayed in the Selected Resources list based on the resource selection in the request template. |
In the Resource Details page, specify values for the attributes of the resource.
In this example, you can select the life span of the E-Business resource being provisioned to the selected user or users. In the Life Span Type lookup, select a life span type, such as Short term, Mid term, or Long term. In the Server lookup, select the name of the E-Business server to connect to. For the Oracle Apps User Responsibilities parent attribute, you can enter multiple sets of values for the Responsibility Start Date, Responsibility End Date, and Responsibility Name child attributes. To do so, select values in the fields, and then click Add. Repeat entering another set of values in the Responsibility Start Date, Responsibility End Date, and Responsibility Name fields, and then click Add. For information about defining parent and child attributes, see "Creating a Request Template Based on the Provisioning Resource Request Type" and "Request Dataset" in the Oracle Fusion Middleware Developer's Guide for Oracle Identity Manager.
Specify values for all other resource attributes, and then click Next.
If you select multiple resources in the Select Resources page, then the Resource Details page for each selected resource is displayed one by one. For instance, in the Select Resources page, you select the E-Business and Active Directory resources. The Resource Details page for the E-Business resource is displayed. Enter values for all attributes of the E-Business resource, and click Next. Then, the Resource Details page for the Active Directory resource is displayed. Specify values for all attributes of the Active Directory resource, and click Next.
In the Justification page, you can specify values for the following fields, and then click Finish to submit the request.
Effective Date: Enter the date when you want the underlying operation of the request to be executed after approval. For example, if you specify September 15 as the effective date for provisioning a laptop to a user, then the laptop is not provisioned to the user before September 15 even if the request is approved. The resource is provisioned on September 15. If the request is approved after September 15, then the resource is provisioned with immediate effect.
Justification: Enter a justification for creating the request.
If you have selected a user to provision the resource, then the request is available for approval. If you have selected multiple users to provision the resource, then the request is broken into multiple child requests for operation level approval, and each child request can be approved or rejected independently.
To create a request to deprovision one or more resources:
Note: The following request types are similar in nature in terms of request creation and execution:
|
In the Welcome page of Oracle Identity Manager Advanced Administration, under Administration, click Requests. Alternatively, you can click the Administration tab, and then click Requests.
From the Actions menu, select Create Request. Alternatively, you can click the create request icon on the toolbar. The Select Request Template page of the Create Request wizard is displayed. The steps in this wizard are dynamically generated based on the selection of the request template in the first step.
From the Request Template list, select De-Provision Resource. Then, click Next.
In the Select Users page, search for the users. Select one or more users from the Available Users list from whom you want to deprovision a resource. Click Move or Move All to move the users to the Selected Users list, and then click Next.
In the Select Resources page, search for the resources. Select one or more resources that you want to deprovision. Click Move or Move All to move the resources to the Selected Resources list. Then, click Next. The Justification page is displayed with summary information about the selected users and resources.
In the Effective Date field, specify a date on which you want the resource to be deprovisioned.
In the Justification field, enter a justification for the deprovisioning operation.
Click Finish. The request to deprovision one or more resources is created.
Note: Resource search in Select Resources page lists all the resources provisioned to user selected in Select Users page. If multiple users are selected, then search shows common resources provisioned to all selected users. |
You can login to Oracle Identity Manager Administration and search for requests to view a list of requests. You can perform simple search and advanced search for requests. You can also view the details of each request.
This section contains the following topics:
To perform a simple search for requests:
Login to Oracle Identity Manager Advanced Administration.
In the Welcome page, under Administration, click Requests. Alternatively, you can click the Requests subtab under the Administration tab.
In the left pane, click the icon next to the Search field. A list of available requests are displayed in the search results table in the left pane with details such as request ID, request type, and request status. You can sort the requests based on the Request ID.
Note:
|
To perform an advanced search for requests:
In the left pane of the Requests section in Oracle Identity Manager Advanced Administration, click Advanced Search. The Advanced Search page is displayed.
Select any one of the following matching options:
All: On selecting this option, the search is performed with the AND condition. This means that the search operation is successful only when all the search criteria specified are matched.
Any: On selecting this option, the search is performed with the OR condition. This means that the search operation is successful when any search criterion specified is matched.
Specify values in the fields as search criteria. For each field, select an operator, such as Equals, Contains, or Begins with.
To discard a field from your search, click the cross icon next to the field. To include a field in your search criteria, click Add Fields, and then select the field from the list.
Click Search. The search results table is displayed with details about request ID, request type, status, date requested, and requester, as shown in Figure 14-1. You can sort the requests based on the Request ID.
Note: Sorting on Request ID is string-based and not number-based. |
From the search results tables of the simple and advanced search, you can view the details of the requests for tracking. To do so, select a request in the search results table. From the Actions menu, select Open Request Detail. The Request Details page for the selected resource is displayed.
Figure 14-1 lists the fields in the Request Information section of the Request Details page:
Table 14-1 Fields in the Request Details page
Field | Description |
---|---|
Request ID |
An ID to uniquely identify the request |
Request Type |
The type of request or the request type based on which the request is created |
Status |
The status in which the request is currently in |
Date Requested |
The date of creation of the request |
Effective Date |
The date from which the operation requested will be active |
Requester |
The user who created the request |
Beneficiary |
The user for whom the request is created |
Justification |
The reason for creating the request |
Parent Request ID |
The request ID of the parent request if the request whose details is displayed is a child request |
Note: From the Request Details page, you can close the request by selecting Close Request from the Actions menu at the top of the page. For information about closing requests, see ""Closing Requests"". |
The Request Details page displays the following tabs:
This tab is displayed in the Request Details page depending on the type of request. For example, the Resources tab is displayed in the Request Details page when the request type is Provision Resource. Similarly, the Users or Roles tabs are displayed when the request types are Create User or Assign Roles respectively.
Figure 14-2 shows the Resources tab:
In this tab, you can view the details of the resources associated with the request. The details include beneficiary, resource name, and resource details. To view resource details, click the View Details link for a particular resource. The Resource Details window is displayed, as shown in Figure 14-3:
This tab displays any comments provided with the request that can help the approver take actions on the request. This tab also allows you to add a new comment to the request. To add a comment:
In the Request Comments tab, from the Actions list, select New Comment. The New Comment dialog box is displayed.
In the Comments field, enter the comment for the request.
Click Save. The comment is added and is displayed in the Request Comments tab, as shown in Figure 14-4:
This tab displays the history of the request, such as the request status, the date when the request is updated, and by whom the request is updated.
Figure 14-5 shows the Request History tab.
Note: If an approver is not specified for a request, then the Updated By column in the Request History tab displays Internal User. This is the OIMINTERNAL user, which is an Oracle Identity Manager system user. All the internal request status updates are performed as Internal User. |
This tab shows the status of tasks that have been assigned to people in connection with the request.
Figure 14-6 shows the Approval Tasks tab. Two tasks are shown: Default Request Level Approval for Request ID 1, and Default Operation Level Approval for Request ID 1. Note that for tasks that are assigned to multiple approvers in a sequence (that is, Assignee 1, then Assignee 2), the Assignee column only shows the name of the person who currently has the task assigned (or, if the task sequence has been completed, it shows the name of the last person who worked on the task).