A request for certain changes to be made to directory data, such as creating users or adding users to groups. An operation can start an approval workflow, in which case the requested changes are made only after they are approved.
The object to be changed or created by the operation. For example, if creation of a user account is requested, that account is referred to as the operation target object. With a request to add a user to a group, the group is referred to as the operation target object.
Approval workflow is governed by workflow start conditions and approval rules. Workflow start conditions determine which kind of operation causes the workflow to start and the approval rules added to the workflow determine the persons who are authorized to approve the operation (approvers).
When an Active Roles user requests an operation, Active Roles checks to see whether the operation meets the start conditions of any workflow, and starts the workflow whose conditions are met. An approval rule included in the workflow then generates an approval task and assigns the task to the approvers defined by the rule.
Figure 96: Approve action