Admin Task Configuration for Two-Stage Approval Processes

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

Identity Manager (IDM) allows for the configuration of multi-step approval processes for Admin Tasks. This can be achieved through non-policy-based settings within the task itself or via specific workflow events. Customers frequently use this to ensure that sensitive tasks, such as user creation or role assignment, require verification from both a manager and a secondary app owner. If a request is rejected at any stage, the decision-maker and rejection status are recorded in the tasksession12_5 table for auditing purposes.

Environment

Identity Manager

Resolution

To configure a non-policy-based two-stage approval:

1. Navigate to Modify Admin Task.
2. Select the specific Admin Task you wish to modify.
3. Click the Pencil icon (Edit) at the bottom of the screen next to the Workflow section.
4. Configure the two-stage approval parameters as required by your business process.
5. Verify Event Configuration: Go to the Events tab for the same task to check if any specific workflow policies are already active, as these may override or conflict with non-policy-based settings.

Additional Information