Identity Portal task delegation restriction to specific employee groups

Products

• CA Identity Manager
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

Identity Portal provides the ability to filter the list of eligible delegates when a user utilizes the delegation feature. This is achieved by applying a custom User Search filter within the administration console, allowing organizations to restrict delegation based on attributes such as user type, reporting structure, or department.

 

Environment

Identity Portal

Resolution

To restrict the users available for selection during task delegation, configure a User Search filter in the Identity Portal AdminUI:

1. Navigate to Settings > General Configuration.
2. Locate the Delegation section.
3. Add or modify a User Search to enable filtering.

Example Filter Configurations:

• To restrict delegation to direct reports only:

  • User Attribute "User Type" Equals "Employee"
  • AND Logged-in user attribute "UserId" Equals "User's Manager"

• To restrict delegation to users with the same manager:

  • User Attribute "Manager" Equals [Logged-in User's Manager Attribute]

• To restrict delegation to users on the same team/division:

  • User Attribute "Division" (or equivalent team attribute) Equals [Logged-in User's Division]