Approval sequence
For pending attestation cases, see the current status of the approval process. The approval sequence is shown as soon as the DBQueue Processor has determined the attestors for the first approval step. In the approval workflow, you can view the approval sequence, the results of each approval step, and the attestors found. If the approval procedure could not find an attestor, the attestation case is canceled by the system.
To display the approval sequence of a pending attestation case
-
In the Manager, select the category
-
Attestation > Attestation runs > Attestation policies > <attestation policy> > Attestation runs > <year> > <month> > <day> > Pending attestations - OR -
-
Attestation > Attestation run > Policy collections> <policy collection> > Attestation runs > <year> > <month> > <day> > Pending attestations.
-
Select an attestation case from the result list.
-
Select the Approval sequence task.
Each approval level of an approval workflow is represented by a special control. The attestors responsible for a particular approval step are shown in a tooltip. Pending attestation questions are also shown in tooltips. These elements are shown in color, the color code reflecting the current status of the approval level.
Table 35: Meaning of the colors in an approval sequence (in order of decreasing importance)
|
Blue |
This approval level is currently being processed. |
|
Green |
This approval level has been granted approval. |
|
Red |
This approval level has been denied approval. |
|
Yellow |
This approval level has been deferred due to a question. |
|
Gray |
This approval level has not (yet) been reached. |
Attestation history
The attestation history displays each step of an attestation case. Here you can follow all the approvals in the approval process in a chronological sequence. The attestation history is displayed for pending and closed attestations.
To display an attestation case in the attestation history
-
In the Manager, select the category
-
Attestation > Attestation runs > Attestation policies > <attestation policy> > Attestation runs > <year> > <month> > <day> - OR -
-
Attestation > Attestation run > Policy collections > <policy collection> > Attestation runs > <year> > <month> > <day>.
-
Select the Pending attestations or the Completed attestations filter.
-
Select an attestation case from the result list.
-
Select the Attestation history report.
These elements are colored. The color code reflects the status of the approval steps.
Table 36: Meaning of colors in the attestation history
|
Yellow |
Attestation case set up. |
|
Green |
Attestor has approved. |
|
Red |
Attestor has denied.
Attestation has been escalated.
Approver has recalled the approval decision |
|
Gray |
Attestation has been canceled.
Case has been assigned to an extra attestor.
Additional attestor has withdrawn approval decision.
Approval has been delegated.
New attestor has withdrawn the delegation. |
|
Orange |
Attestor has a question.
The query has been answered.
Query was canceled due to change of approver. |
|
Blue |
Approver has rerouted approval.
The approval step was reset automatically. |
Reports about attestation cases
One Identity Manager makes various reports available containing information about the selected base object and its relations to other One Identity Manager database objects. The Attestation cases report is available for attestors. The report shows all the attestor's pending and closed attestation cases. Attestors can use this report to make approval decisions in the Manager about attestation cases.
To display the Attestation cases report for an employee
-
In the Manager, select the Employees > Employees category.
-
Select the employee in the result list.
-
Select the Attestation cases report.
-
If a report has been defined for the attestation case, you can view it using the button in the View report column.
-
(Optional) To approve pending attestation cases
-
Select the Pending attestation cases tab.
-
Select an attestation case and enable the Approve or the Deny option in the list.
-
Enter the Reason for decision or select a Standard reason.
-
Click Carry out approval.
Modifying approval workflows for pending attestation cases
When approval workflows are changed, a decision must be made as to whether these changes should be applied to pending attestation cases. Configuration parameters are used to define the desired procedure.
Scenario: Another approval workflow was stored with the approval policy
The newly stored workflow is only used in new requests. If changes have been made to the approval workflow in an approval policy, any pending approval procedures are continued by default with the original workflow. The newly stored workflow is only used in new attestation cases. You can configure different behavior.
To specify how to handle pending attestation cases
A working copy of the originally applicable workflow is saved. The working copy is retained as long as it is used in ongoing approval processes. All unused working copies are regularly deleted using the Maintenance approval workflows schedule.
Scenario: A change was made to an approval workflow in use
If changes have been made to an approval workflow that is being used in pending attestation cases, any pending approval processes are continued by default with the original workflow. The changes to the approval workflow are only implemented for new attestation cases. You can configure different behavior.
To specify how to handle pending attestation cases
A working copy of the approval workflow that contains the original version is saved. This working copy is retained as long as it is used in ongoing approval processes. All unused working copies are regularly deleted using the Maintenance approval workflows schedule.
Related topics
