Chief approval team
Sometimes, approval decisions cannot be made for requests because the approver is not available or does not have access to One Identity Manager tools. To complete these requests, you can define a chief approval team whose members are authorized to intervene in the approval process at any time.
There is a default application role in One Identity Manager for the chief approval team. Assign this application role to all employees who are authorized to approve, deny, cancel requests in special cases, or to authorize other approvers. For more information about application roles, see the One Identity Manager Authorization and Authentication Guide.
Table 67: Default application role for chief approval team
|
Chief approval team |
Chief approvers must be assigned to the Request & Fulfillment | IT Shop | Chief approval team application role.
Users with this application role:
- Approve through requests.
- Assign requests to other approvers.
|
To add members to the chief approval team
-
In the Manager, select the IT Shop > Basic configuration data > Chief approval team category.
-
Select the Assign employees task.
In the Add assignments pane, assign the employees who are authorized to approve all requests.
TIP: In the Remove assignments pane, you can remove the assignment of employees.
To remove an assignment
- Save the changes.
Detailed information about this topic
Product owners
Employees who are approvers in approval processes for requesting service items can be assigned to these service items. To do this, assign a service item or a service category to an application for Product owners. Assign employees to this application role who are authorized to approve requests in the IT Shop and to edit service item or service category main data.
A default application role for product owners is available in One Identity Manager. You may create other application roles as required. For more information about application roles, see the One Identity Manager Authorization and Authentication Guide.
Table 68: Default application roles for product owners
|
Product owners |
Product owners must be assigned to the Request & Fulfillment | IT Shop | Product owners application role or a child application role.
Users with this application role:
|
To add employees to the default application role for product owners
-
In the Manager, select the IT Shop > Basic configuration data > Product owners category.
-
Select the Assign employees task.
In the Add assignments pane, add employees.
TIP: In the Remove assignments pane, you can remove assigned employees.
To remove an assignment
- Save the changes.
To add another application role for product owners
-
In the Manager, select the IT Shop > Basic configuration data > Product owners category.
-
Click 
in the result list.
-
Enter at least the application role's name and, in the Parent application role menu, select the Request & Fulfillment | IT Shop | Product owners application role or a child role.
- Save the changes.
-
Assign employees to the application role.
Related topics
Attestors
NOTE: This function is only available if the Attestation Module is installed.
In One Identity Manager, you can assign employees, who are brought in as attestors to attest these objects, to IT Shop structures (shelves, shops, shopping centers, service categories, and shelf templates). To do this, assign the IT Shop structures to application roles for attestors. Assign these application roles to employees who are authorized to attest these objects and their assignments.
For more information about attestation, see the One Identity Manager Attestation Administration Guide.
A default application role for attestors is available in One Identity Manager. You may create other application roles as required. For more information about application roles, see the One Identity Manager Authorization and Authentication Guide.
Table 69: Default application roles for attestors
|
Attestors for IT Shop |
Attestors must be assigned to the Request & Fulfillment | IT Shop | Attestors application role.
Users with this application role:
-
Attest correct assignment of company resource to IT Shop structures for which they are responsible.
-
Attest objects that have service items assigned to them.
-
Can view main data for these IT Shop structures but not edit them.
NOTE: This application role is available if the Attestation Module is installed. |
To add employees to default application roles for attestors
-
In the Manager, select the IT Shop > Basic configuration data > Attestors category.
-
Select the Assign employees task.
In the Add assignments pane, add employees.
TIP: In the Remove assignments pane, you can remove assigned employees.
To remove an assignment
- Save the changes.
To add another application role for attestors
-
In the Manager, select the IT Shop > Basic configuration data > Attestors category.
-
Click in the result list.
-
Enter at least the application role's name and, in the Parent application role menu, select the Request & Fulfillment | IT Shop | Attestor application role or a child role.
- Save the changes.
-
Assign employees to the application role.
Related topics
Setting up IT Shop structures
Depending on the company structure, you can optionally define shopping centers for your IT Shop solution where several shops can be bought together under one roof. Always add the shopping center to the top level of the IT Shop. Shopping centers may not be hierarchical.
Each shop contains a number of shelves that the customer can request products from. You can add a shop to the top level of the IT Shop or under a shopping center. Shops may not be hierarchical.
There are various products available for request on shelves. Shelves are set up under each shop.
IMPORTANT:If a shop contains a large number of customers, the calculations in the
IT Shop can cause a heavy load on the
DBQueue Processor and therefore on the database server, as well.
Structure the IT Shop so that no more than 30,000 customers can make requests in each shop. If necessary, set up your own shopping center with several shops and customer nodes.
Detailed information about this topic
.