To approve a file share creation request (Employee's Manager)

1. Log on to the One Identity Manager web portal.

   All pending requests appear in the following locations in the One Identity Manager web client:

   • Home (Welcome) page: (Pending requests)
   • My Actions page: (Request | My Actions | Pending Requests)
2. To view a list of all pending requests awaiting your decision, click the Pending requests tile from one of these pages.

   The Pending Requests view appears.

3. Select the request to be approved. Selecting a request in the left pane displays the request details in the right pane.

4. Click the Approve button in the Decision column, then click Next.

   The Approvals view appears allowing you to review your decision and enter additional details about your approval decision.

5. (Optional) On the Approvals view, enter the following details regarding your decision:
   1. Reason for approvals: Enter a reason for approving the requests. This reason applies to all approved requests listed unless there is an individual reason given in the Reason column of an approval.

   2. Standard reason: Select a standard reason from a list of previously defined reasons.

      Note: For more information about defining standard reasons, see the One Identity Manager IT Shop Administration Guide.

   3. Valid from: This is set to immediately and cannot be changed.
   4. Valid until: Does not apply to this type of request. This is set to unlimited and changing the end date has no effect on the request.
   5. Reason: Click Enter a reason to specify a reason for your decision that is specific to the selected request.
6. Click Save approvals.

Once you make an approval decision, the request disappears from your list of pending requests. To view your approval decisions, select Request | My Actions | Approval History. Selecting this tile displays the Approval History view.

To request additional information about a request

1. From the Pending Requests view (Request | My Actions | Pending Requests), select the request to which you require additional information.

2. Click more | Ask for help, located under the request details pane (right pane).

   Clicking this option displays the Submit an inquiry about this request dialog showing a list of employees.

3. Select an employee who is to receive the question.

   The Submit an inquiry about this request dialog reappears allowing you to enter your question.

4. Enter your question and click Save to place the request on hold and send your question.

   A message stating the inquiry has been submitted is displayed at the top of the Pending Requests view. In addition, a Query step is added to the workflow in the request's details pane.

5. If you no longer need additional information about a request, click the Recall last question button. In the Recall last question dialog, enter a reason for recalling the question and click OK.

When you request additional information, a request inquiry is submitted to the recipient. That is, when that employee logs on to the web portal, they see a new action in the Request | My Actions | Request Inquiries action list. In addition, the recipient receives a "Question about a request" email notification with a link to the web portal. From the Request Inquires view, they can then respond to your question.

To view their response, open the Pending Requests page, select the required request and open the Workflow tab in the details pane.

To revoke a request's hold status

1. From the Pending Requests view (Request | My Actions | Pending Requests), select the request you want to release from hold status.

2. Click the Revoke hold status button.

   Revoking the hold status of a request releases the request for approval or editing by other approvers.

To select where the file share is to be created (Data Governance Administrator)

1. Log on to the One Identity Manager web portal.

   All pending requests appear in the following locations in the One Identity Manager web client:

   • Home (Welcome) page: (Pending requests)
   • My Actions view: (Request | My Actions | Pending Requests)
2. To view a list of all pending requests awaiting your decision, select the Pending Requests tile from one of these pages.

   The Pending Requests view appears.

3. On the Pending Requests view, select the required request.

   Note: If the manager approval step was bypassed, the following warning appears "Request does not have manager".

4. Click the Select server and groups button.

   The New File Share dialog appears, which consists of two tabbed pages:

   • File Share: Use this page to select the server to host the file share and the root path for the new file share. You can also specify whether to publish the share to the IT Shop.
   • Permissions: Use this page to specify the group naming pattern to be used for the groups that are created to support the new file share.

   TIP: By default a server host and group naming pattern are selected for you; you can use these pages to change these default selections. However, you must specify the root path in order to proceed. If the OK button at the bottom of the dialog is disabled, ensure that you have selected a root path.

5. On the File Share page, select the server that is to host the share and the root path for the new file share.

   Note: The server must be an appropriately configured managed host. For more information on configuring a managed host for hosting file shares and adding a share root path, see Setting up share creation requests.

   If you see the following message, "For the domain of the selected File Share host, please specify an Active Directory container in which to create permissions groups and please specify an Active Directory group that will have full control of this new File Share", see the directions provided in Updating managed resource type domain object with full-control group and Active Directory container.

   1. Share Name: This field displays the name specified in the request. If necessary, use this field to rename the share.
   2. Publish to IT Shop: To publish the share to the IT Shop, select the check box. If you do not want the share available to others through the IT Shop, clear the check box. This check box reflects the option specified in the request; but can be changed using this check box.
   3. File Share Host: Select one of the following methods for specifying a server to host the file share:
      • Use a script to select a server: This option is selected by default and the system selects a random server based on the QAM_RandomNode script. Click Change to display a list of server selection scripts that can be run to select a different server.
        • In the Sever Selection Scripts dialog, locate the script to be run and click Run Script.

        • Once the script has completed, the Result column displays the servers that meet the criteria defined in the script. Select a server from this list and click Close.

        Note: To add server selection scripts to your Data Governance Edition deployment, use the Object Browser (QAMServerSelectionScript) or Windows PowerShell (Add-QServerSelectionScript). For more information, see Server selection scripts.

      • Manually specify the server: To manually select a server, select this option and click Assign or Change to display a list of managed hosts that are flagged as managed resource hosts. 

        • In the Managed host dialog, select a managed host from the list and click Close.

      Note: For DFS managed hosts, if the DFS namespace is not listed, ensure that both the DFS server hosting the DFS namespace and the share server where the DFS link is pointing to have been added as managed hosts. Also, check to ensure that your DFS managed host is flagged as a managed resource host (has the IsManagedResourceHost property set to True).

      The selected server appears on the File Share page. To change your selection, select the option to be used to select the server and click Change.

   4. Root Path: Select a root path under the specified server where the new file share is to be created.

      • Select one of the following options:

        • Select a non-DFS path

        • Select a DFS root path

          Note: If there are no DFS root paths shown in the Browse dialog, check that the QAMDfsTarget table is populated with your DFS paths.

      • Choose a root path for the new file share: Click Assign to display a list of managed share root paths.

        • In the Managed Share Root Path dialog, select a root path and click Close.

        Note: To add or modify share root paths, use the Object Browser (QAMManagedShareRootPaths) or Windows PowerShell (Add-QManagedShareRootPath). For more information, see Creating and specifying share root paths.

      The selected root path appears on the File Share page. To change your selection, click Change.

6. (Optional) On the Permissions page, specify the naming pattern to be used to build the new groups.

   Note: Click the expansion arrow to the left of the Domain Local group to view the nested Global group.

   1. Click Edit to the right of a group.

   2. In the Group Name dialog, add literal values and variables to define the group naming pattern to be used to create the new Active Directory group.

      Note: See Group naming patterns for more details on defining a group naming pattern and the variables available for use.

   3. Click OK to save your selection and close the dialog. The new pattern appears in the Pattern to dynamically build group name with column.

7. Click Close to save your selections and close the dialog.

8. Click the Approve button in the Decision column, then click Next.

   The Approvals view appears allowing you to review your decision and enter additional details about your approval decision.

9. (Optional) On the Approvals view, enter the following details regarding your decision:
   1. Reason for approval: Enter a reason for approving the requests. This reason applies to all approved requests listed, unless there is an individual reason given in the Reason column of an approval.

   2. Standard reason: Select a standard reason from a list of previously defined reasons.

      Note: For more information about defining standard reasons, see the One Identity Manager IT Shop Administration Guide.

   3. Valid from: This is set to immediately and cannot be changed.
   4. Valid until: Does not apply to this type of request. This is set to unlimited and changing the end date has no effect on the request.
   5. Reason: Click Enter a reason to specify a reason for your decision that is specific to the selected request.
10. Click Save approvals.

Once you make an approval decision, the request disappears from your list of pending requests. To view your approval decisions, select Request | My Actions | Approval History. Selecting this tile displays the Approval History view.

Once the file share is created, an email is sent to the requestor with the location and name of the new share.