Configure Two-Stage Approval Workflow for Create User Task

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

This article describes the configuration steps required to create a "Create User" task with a two-stage approval workflow.

Environment

• Product: CA Identity Manager
• Version: 14.x

Resolution

1. Enable Workflow

1. Log in to the Identity Manager Management Console.
2. Navigate to Environments > [Your Environment] > Advanced Settings > Workflow.
3. Select the Enabled checkbox.
4. Click Save.
5. Restart the Environment.

2. Set Up Admin Roles and Groups

1. Log in to the Identity Manager User Console as an admin.
2. Create an Admin Role:
   • Navigate to Roles and Tasks > Admin Roles > Create Admin Role.
   • Select the Create a new admin role radio button and click OK.
   • Enter "SysAdmin" into the Name field and select the Enabled checkbox.
   • In the Owners tab, click Add.
   • From the Users drop-down, select "who are members of".
   • Select the admin role, browse for "System Manager", and click OK.
   • In the Members tab, click Add to associate your primary administrative user (User1).
   • Submit the task.
3. Create a Group:
   • Navigate to Groups > Create Group.
   • Select your Organization and set the name to "Helpdesk".
   • In the Administrators tab, add your primary admin user.
   • In the Members tab, add the user designated as "User2".
   • Submit the task.

3. Copy Create User Task and Assign Approvers

1. Navigate to Roles and Tasks > Admin Tasks > Create Admin Task.
2. Select Create a copy of an admin task and search for the Create User task.
3. Update the Name field to "Create User Two Stage Approval" and set the Tag field to CreateUserTwoStageApproval.
4. Edit the Workflow Process:
   • In the Non-Policy Based drop-down list, select TwoStageApprovalProcess.
5. Configure Approver Sections:
   • Default Approver: Approval Task = Approve Admin Task; Participant Resolver = Group Members (Select the "Helpdesk" group).
   • Business Approver: Approval Task = Approve Admin Task; Participant Resolver = List of Users (Select "User3").
   • Technical Approver: Approval Task = Approve Admin Task; Participant Resolver = Admin Role Members (Select the "SysAdmin" role).
6. Click OK and Submit.

4. Assign Task to System Manager Role

1. Navigate to Roles and Tasks > Admin Roles > Modify Admin Role.
2. Select the System Manager role and click Select.
3. Click the Tasks tab.
4. In the Filter by category drop-down, select Users.
5. In the Add Task list, select "Create User Two Stage Approval".
6. Click Submit.

5. Validation

1. Navigate to Users > Manage Users > Create User Two Stage Approval.
2. Follow the prompts to create a user and submit.
3. Confirm the "Task Pending" message appears.
4. Log in as "User3" to review the Work List and click the approval hyperlink.
5. Use the View Job tab to verify the workflow diagram progression.
6. Log in as "User1" to complete the subsequent approval step.

 

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.