Chat now with support
Chat with Support

Identity Manager 8.0 - IT Shop Administration Guide

Setting up an IT Shop Solution
One Identity Manager Users in the IT Shop Putting the IT Shop into Operation Requestable Products Preparing Products for Requesting Assigning and Removing Products Preparing the IT Shop for Multi-factor Authentication Assignment Requests and Delegating Creating IT Shop Requests from Existing User Accounts, Assignments and Role Memberships Adding Groups Automatically to the IT Shop
Approval Processes for IT Shop Requests
Editing Approval Policies Approval Workflows Determining Effective Approval Policies Selecting Responsible Approvers Request Risk Analysis Testing Requests for Rule Compliance Approving Requests from an Approver Automatic Request Approval Obtaining Other Information about Requests by an Approver Appointing Other Approvers Setting up an Approval Step Approvers cannot be Established Automatic Approval on Timeout Abort Request on Timeout Approval through Chief Approval Team Approving Requests with Terms of Use Using Default Approval Processes
Request Sequence Managing an IT Shop
IT Shop Base Data Setting up IT Shop Structures Setting Up a Customer Node Deleting IT Shop Structures Templates for Automatically Filling the IT Shop Creating Custom Mail Templates for Notifications request templates
Default Solution for Requesting System Entitlements Error Handling Appendix: Configuration Parameters for the IT Shop Appendix: Request Statuses Appendix: Example of Request Results

Approval Processes for IT Shop Requests

Approval Processes for IT Shop Requests

All IT Shop requests are subject to a defined approval process. During this approval process, authorized employees grant or deny approval for the product assignments. You can configure this approval process in various ways and therefore customize it to meet your company policies.

You define approval policies and approval workflows for approval processes. Specify which approval workflows are going to be used for the request in the approval policies. Use approval workflows to specify which employee is authorized to grant or deny approval for the request at the time it was placed. An approval workflow can contain a number of approval levels and this can in turn contain several approval steps, for example, when several management hierarchy layers need to give approval for a request. A special approval procedure is used to determine the approvers in each approval procedure.

In the default installation, several approval policies are assigned to the "Identity Lifecycle". Therefore, requests from this shop are run through predefined approval processes. Assign an approval policy to the shop, the shelf or the service item of the "Identity & Access Lifecycle" shelf if requests from this shop should go through customized approval process.

Detailed information about this topic

Editing Approval Policies

Editing Approval Policies

One Identity Manager uses approval policies to determine the approver for each request process.

To edit an approval policy

  1. Select the category IT Shop | Basic configuration data | Approval policies.
  2. Select an approval policy from the result list. Select Change master data in the task view.

    - OR -

    Click in the result list toolbar.

  3. Edit the approval policy master data.
  4. Save the changes.

General Master Data for Approval Policies

General Master Data for Approval Policies

Enter the following master data for an approval policy. If you add a new approval step, you must fill out the compulsory fields.

Table 30: General Master Data for Approval Policies
Master Data Meaning
Approval policies Approval step name.
Role type Use role types to fix inheritance of approval policies within a IT Shop solution. For more information, see Determining Effective Approval Policies. Add the required role types in IT Shop | Basic configuration data | Roles types. For more information, see Role Types.
Priority An integral number with a maximum of one digit.

A priority is used to decided which approval policy should be used if several approval policies are found to be valid following the given rules. The highest priority has the largest number.

Approval workflow Workflow for determining approvers when a product is requested.

Select any approval workflow from the menu or click to set up a new workflow. For more information, see Setting Up Approval Workflows.

Renewal workflow Approval workflow for determining approvers when a product is renewed.

Select any approval workflow from the menu or click to set up a new workflow. For more information, see Setting Up Approval Workflows.

The request workflow is used (UID_SubMethodOrderProduct) if no renewal workflow is given when a request is renewed.

Cancellation workflow Approval workflow for determining approvers when a requested product is canceled.

Select any approval workflow from the menu or click to set up a new workflow. For more information, see Setting Up Approval Workflows.

Mail templates

Mail template used for email notifications for granting or denying approval for a request and expired or canceled requests.

For more information, see Notifications in the Request Process.

Description Spare text box for additional explanation.

Default Approval Policies

Default Approval Policies

One Identity Manager supplies service items by default. These approval policies are used in the "Identity & Access Lifecycle" shop approval processes. You can store mail templates with default approval policies for sending notifications during the request process and specifying a priority.

To edit default approval policies

  • Select the category IT Shop | Basic configuration data | Approval policies | Predefined.
Related Documents