Chat now with support
Chat with Support

Identity Manager 8.0 - IT Shop Administration Guide

Setting up an IT Shop Solution
One Identity Manager Users in the IT Shop Putting the IT Shop into Operation Requestable Products Preparing Products for Requesting Assigning and Removing Products Preparing the IT Shop for Multi-factor Authentication Assignment Requests and Delegating Creating IT Shop Requests from Existing User Accounts, Assignments and Role Memberships Adding Groups Automatically to the IT Shop
Approval Processes for IT Shop Requests
Editing Approval Policies Approval Workflows Determining Effective Approval Policies Selecting Responsible Approvers Request Risk Analysis Testing Requests for Rule Compliance Approving Requests from an Approver Automatic Request Approval Obtaining Other Information about Requests by an Approver Appointing Other Approvers Setting up an Approval Step Approvers cannot be Established Automatic Approval on Timeout Abort Request on Timeout Approval through Chief Approval Team Approving Requests with Terms of Use Using Default Approval Processes
Request Sequence Managing an IT Shop
IT Shop Base Data Setting up IT Shop Structures Setting Up a Customer Node Deleting IT Shop Structures Templates for Automatically Filling the IT Shop Creating Custom Mail Templates for Notifications request templates
Default Solution for Requesting System Entitlements Error Handling Appendix: Configuration Parameters for the IT Shop Appendix: Request Statuses Appendix: Example of Request Results

Copying Approval Workflows

Copying Approval Workflows

For example, you can copy default approval workflows in order to customize them.

To copy an approval workflow

  1. Select the category IT Shop | Basic configuration data | Approval workflows.
  2. Select an approval workflow in the result list. Select Change master data in the task view.
  3. Select Copy workflow... in the task view.
  4. Enter a name for the copy.
  5. Click OK to start the copy actions.

    - OR -

    Click Cancel to cancel the copy action.

Deleting Approval Workflows

Deleting Approval Workflows

To delete an approval workflow

  1. Remove all assignments to approval policies.
    1. Check to which approval policies the approval workflow is assigned.
    2. Go to the approval policy master data form and assigned another approval workflow.
  2. Select the category IT Shop | Basic configuration data | Approval workflows.
  3. Select an approval workflow in the result list.
  4. Click .
  5. Confirm the security prompt with Yes.
Detailed information about this topic

Default Approval Workflows

Default Approval Workflows

One Identity Manager provides approval workflows by default. These approval workflows are used in the "Identity & Access Lifecycle" shop approval processes. Each default approval workflow is linked to a default approval policy. You can edit different properties of the approval step, for example, to configure notifications in the request process.

To edit default approval workflows

  • Select the category IT Shop | Basic configuration data | Approval workflows | Predefined.

Determining Effective Approval Policies

Determining Effective Approval Policies

You can apply approval policies to different IT Shop structures and service items. If you have several approval policies within your IT Shop, which policy is to be used is based on the rules that are specified.

Effective approval policies are defined in the following way:

  1. The effective approval policy is the one assigned to the requested service item.
  2. If there is no approval policy assigned to the service item, the approval policy from the service category is used.
  3. If there is no approval policy assigned to the service item, the approval policy assigned to the requested product’s shelf is used.
  4. If there is no approval policy assigned to the shelf, one of the approval policies assigned to the shop is used.
  5. If there is no approval policy assigned to the shop, one of the approval policies assigned to the shopping center is used.

An approval policy found by one of these methods is applied under the following conditions:

  • The approval policy is not assigned a role type.

    - OR -

  • The assigned role type corresponds to the shelf role type.

If more several effective approval policies are identified by the rules, the effective approval policy is determined by the following criteria (in the given order).

  1. The approval policy has the highest priority (alphanumeric sequence).
  2. The approval policy has the lowest number of approval steps.
  3. The first approval policy found is taken.

If no approval policy can be found, a request cannot be started. If no approver can be determined for one level of an approval policy, the request can be neither approved nor denied. Open requests are rejected and closed. Canceled products remain assigned. Products for renewal remain assigned until the valid until date is reached.

Related Documents