Is it possible to approve a request by users who belong to specific LDAP groups in CA Service Catalog?

Products

• CA Service Management - Asset Portfolio Management
• CA Service Management - Service Desk Manager

Issue/Introduction

Is it possible to approve a request  by users who belong to specific LDAP groups in CA Service Catalog?

Environment

CA Service Catalog 12.9 and later
Active Directory (LDAP)
Process Automation (PAM)

Resolution

Catalog has 4 options for the approval:

1. No Approval
2. System Approval Process
3. Workflow Driven Approval Process
4. Policy driven approval

To be able to approve by users who belong to an specific LDAP Group, you can use Policy driven approval or Workflow Driven Approval Process.

- Policy driven approval is native from Catalog. To configure it:

1. Ensure EEM being used by CA Service Catalog is connected to LDAP
2. Log into Catalog as Service Delivery Administrator > Catalog > Policies > Select the policy
3. In the frame below, click on  Assignees lookup icon > Set Assignee Type: Group > Click on lookup icon below > Select group from LDAP > OK > Save.

- Workflow Driven Approval Process will use PAM to run a process and then through a Catalog WebServices (assignPendingAction method) the group can be assigned.

Additional Information

Further information about the approval process:
https://docops.ca.com/ca-service-management/14-1/en/using/request-management/request-management-using-ca-service-catalog/approval-processes-and-fulfillment-processes