Enforced Scoping Workflow Approver Assignment Issues in Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

When utilizing Workflow with Enforced Scoping in CA Identity Manager, administrators may find that the system fails to assign the expected user as the primary approver.

This issue generally arises when the administrative task configuration is incomplete, preventing the system from identifying the user's role-based scoping permissions.

Environment

Identity Manager 14.x

Cause

The Workflow process cannot identify the primary approver because the specific Administrative Task has not been explicitly associated with the relevant Admin Role. Without this assignment, the Enforced Scoping logic cannot validate the user's credentials against the task parameters.

Resolution

To ensure the primary approver is correctly identified for Workflow tasks with Enforced Scoping:

1. Log in to the Identity Manager Management Console as a System Administrator.
2. Navigate to the Admin Role assigned to the approver.
3. Access the Tasks tab for the selected Admin Role.
   
4. Add the specific Administrative Task (e.g., "Modify User") to the list of tasks associated with this role.
5. Save the configuration.
6. Verify that the task is now correctly linked to the Admin Role, allowing the Enforced Scoping to function as intended.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.