The Active Roles Console provides the Workflow Designer for creating and configuring workflows. First, you create a workflow definition. Then, you use the Workflow Designer to construct a workflow, saving the workflow configuration data in the workflow definition.
To create a workflow definition
-
In the Active Roles Console tree, expand Configuration > Policies, right-click Workflow, and select New > Workflow.
-
Follow the steps in the wizard for creating the workflow definition.
-
On the Workflow Type page, accept the default setting.
By default, the wizard creates a change workflow that starts upon a request to change data in the directory. Another option is to create an automation workflow that can be run on a scheduled basis or on user demand. For more information, see Automation workflow.
Once you have created a workflow definition, you can open it in the Workflow Designer to add workflow activities and specify workflow start conditions.
You can create containers to store related workflows and other containers. To create a workflow container, right-click Workflow in the Console tree and select New > Container. To create a workflow definition in a given container, right-click the container in the console tree, and select New > Workflow.
You can delete a workflow definition as follows: In the Console tree under Configuration > Policies > Workflow, right-click the object representing the workflow definition, and click Delete.
You can specify the start conditions for a workflow by editing its definition in the Workflow Designer. The start conditions determine which operations cause the workflow to start.
For more information, see Configuring workflow start conditions.
For example, suppose you want the creation of user accounts in a certain Organizational Unit to require approval. You can implement this scenario by configuring the workflow start conditions as follows:
-
Set type of operation to 'Create'.
-
Set type of object to 'User'.
-
Set initiator to 'Any User'.
-
Set container by selecting the Organizational Unit you want.
As a result of these conditions, the workflow will start whenever Active Roles is used to create a user account in that Organizational Unit.
When constructing an approval workflow, you add one or more approval activities to the workflow definition, thereby creating approval rules, and then configure those activities to define approvers for each rule. The entities that can be designated as approvers include manager of operation requestor, manager of operation target object, and manager of container that holds operation target object. It is also possible to select any particular user or group of users for the role of approver.
Extending the previous example, suppose you want the creation of user accounts to be approved by the manager of the Organizational Unit in which the accounts are going to be created. You can implement this scenario by adding an approval activity to the workflow and then using the Properties command on that activity to select the corresponding option on the Approvers Selection page.
For more information, see Configuring an Approval activity.
You can configure approval rules to notify approvers or other interested parties of specific events that may occur in the approval process. For example, an approval rule can be configured so that the approvers defined by the rule receive a notification e-mail whenever an operation is requested that requires their approval. Other events to notify of include the completion of an approval task indicating that an approver has either allowed or denied the requested changes, the completion of the operation indicating that the requested changes have been applied, and the operation failure because of an error condition.
