Retention time for pending changes
Pending changes are saved for a fixed period. After this period has expired, the entries are deleted by the DBQueue Processor from the QBMPendingChange and QBMPendingChangeDetail tables. The retention period depends on the status of provisioning processes and can be configured in the configuration parameter. The specified periods apply to both automatic and manual provisioning processes.
To configure the retention period for pending changes
-
To change the retention period for successful provisioning processes, in the Designer, edit the value of the QBM | PendingChange | LifeTimeSuccess configuration parameter. Enter a retention period in days. The default is 2 days.
-
To change the retention period for failed provisioning processes, in the Designer, edit the value of the QBM | PendingChange | LifeTimeError configuration parameter and enter the retention period in days. The default is 30 days.
-
To change the retention period for pending provisioning processes, in the Designer, edit the value of the QBM | PendingChange | LifeTimeRunning configuration parameter and enter the retention period in days. The default is 60 days.
Related topics
Configuring manual provisioning
|
WARNING: Data may be lost through inconsistencies.
If you select manual provisioning, you must ensure that changes from the One Identity Manager database are transferred quickly to the cloud application using suitable manual processes.
Ensure that data between the cloud application and the One Identity Manager database is synchronized regularly and quickly. To do this, set up synchronization through the SCIM connector. If this is not possible, you can synchronize using the CSV connector. |
Manual provisioning permissions are configured in the cloud application. Pending manual provisioning processes for this cloud application are displayed in the Web Portal. Operators can transfer pending changes to cloud application using this overview and then mark them as done. Auditors can check pending and completed provisioning processes in the Web Portal.
To configure manual provisioning
-
Edit the cloud application's main data.
-
Set the Manual provisioning option.
-
In the Web Portal, assign the operators who are permitted to edit pending provisioning processes.
-
In the Web Portal, specify the auditors who are authorized to check manual provisioning processes.
For more detailed information about synchronizing using the CSV connector, see the One Identity Manager CSV Connector User Guide.
Detailed information about this topic
Managing provisioning processes in the Web Portal
Pending manual provisioning processes for cloud applications are displayed in the Web Portal. Operators can transfer pending changes to cloud application using this overview and then mark them as done. Auditors can check pending and completed provisioning processes in the Web Portal.
Depending on which application roles they own, users can view or manage provisioning processes in the Web Portal according to their entitlements. For more information, see One Identity Manager users for managing cloud applications.
To log into the Web Portal
- Open the Web Portal page by entering the Web Portal URL in the address bar of the web browser.
By default the URL is http: //<server name>/<application name>, where <server name> is the computer on which the Web Portal is installed.
- Enter your complete login name in the Login name field.
- Enter your password in the Password field.
- Click Log in.
For more information about logging in to the Web Portal, see in the One Identity Manager Web Designer Web Portal User Guide.
Detailed information about this topic
Editing pending provisioning processes
If you are an operator, you can edit pending provisioning processes in the Web Portal. A provisioning process is a task for the operator to perform an operation on a target object.
NOTE: Administrators can also carry out pending provisioning processes.
The processes displayed in descending order by date with object names and a description of the operation in the Pending cloud operations view. The operation type is displayed in the Operation view in the detailed information about the marked process. There are the following operation types.
Table 14: Operation types
New object |
Create a new object. |
Change |
Set a value in the target system. |
Deletion |
Delete an object. |
Detailed instructions are given in the operation detail for every requested operation labeled with . If several pending processes exist for one target object, you handle the processes in the order in which they arrived. That means the oldest process must be handled first.
To edit a pending provisioning process
-
On the Web Portal's home page, open the Pending Cloud Operations menu.
-
In the Pending Cloud Operations view, mark the desired provisioning process.
NOTE: If several operations are list under each other for the pending process marked in the operation detail, edit the first operation.
-
Carry out the instructions.
-
Click Mark as Done.
This causes the completed provisioning process to disappear from the Pending Cloud Operations view.