Issues with global delegations if user only has access to custom IT Shop (4381682)

Global delegation requests are denied with "Automatic system approval: No approver available (in this shop)."

After creating a custom IT Shop to ensure that standard users cannot order default products, Identity & Access Lifecycle IT Shop only has a limited set of users assigned to the user.

Delegation and Deputy (temporary) resources were assigned to the custom IT Shop.

When configuring global delegations(deputy, via /portal/delegations/global/), the request is successfully submitted but is then automatically denied with the error "Automatic system approval: No approver available (in this shop)."

The web portal calls the UniversalSubstitute function with the UID_OrgPRExternal parameter as null.

This then translates to null for the input parameter UID_OrgPRExternal for the QER_PUniversalSubstitute SQL stored procedure. That causes the values for the IT Shop, shelf, user, and product to always be evaluated as 'Identity & Access Lifecycle', 'Identity Lifecycle', 'Identity Lifecycle Customer' and 'Deputy (temporary)' respectively in the procedure.

This has been logged as Defect ID: 648586

WORKAROUND: The users need to have access to the Identity & Access Lifecycle shop for the global delegations to work.

STATUS: Waiting for 648586 to be evaluated in a future version of Identity Manager.