Task provisioner

[VijayR]

Hi,

We have a requirement where after the access approval, the task should be routed to a different provisioning group.

Lets say if we have two entitlements for an application ERC.

1. ERC ETS Compliance

2. ERC CCA PAA 

The 1st (ERC ETS Compliance) entitlement task should be routed to "ERC ETS Compliance Provisioning Group" upon approval and the 2nd (ERC CCA PAA) entitlement task should be routed to "ERC CCA PAA Provisioning Group" . Please let me know how this functionality can be implemented.

Thanks,

Vijay

[pruthvi_t]

@VijayR ,

Can you please elaborate on the requirement. Once the request is approved the tasks would be created for respective entitlements. Now the provisioning job runs and completes the tasks provisioning them to target application.

Kindly provide more information on assigning tasks to the provisioning groups like mentioned by you. 

Thanks,

[VijayR]

 Hi @pruthvi_t ,

After the request approval a task can be assigned to user or usergroup. The ask here is,  how to redirect the task based on a condition to a provision user group.

Thanks,

Vijay

[pruthvi_t]

Hi @VijayR ,

As per my understanding, once the tasks are created, you'd like to assign the respective user/user group as the task owner based on the entitlement. For that you're looking for an approach to redirect the tasks to respective groups with the help of any conditions. Please correct me if my understanding is not accurate.

Thanks,

[Manu269]

Refer this article : https://docs.saviyntcloud.com/bundle/EIC-Admin-v2020x/page/Content/Chapter02-Identity-Repository/Vie...

Provisioning Owner : Provisioning owners manually approve the provisioning tasks for disconnected applications. You can select a particular user, or a user group to approve the provisioning tasks based on the value specified for Provisioning Owner Type. This parameter is only applicable for disconnected applications.

Or refer this : https://docs.saviyntcloud.com/bundle/EIC-Admin-v2020x/page/Content/Chapter02-Identity-Repository/Cre...

Check the parameters :

1. Owner Type

2. Owner

3. Resource Owner Type

4. Resource Owner 

[VijayR]

Hi @Manu269,

Thanks for the documentation link, the requirement we have is to assign the tasks to a different user group based on the entitlementvalue that they have selected during the request process.

ex: if a user is requesting for a EV1 then the task should be assigned to EV1 User Group likewise if they are requesting for EV2 then the task should be assigned to EV2 UserGroup. Please let me know how this can be achieved.

Vijay

[pruthvi_t]

@VijayR ,

As per the design, when a request raised for a connected application is approved, tasks are created for respective entitlements. The tasks will be processed by provisioning job irrespective of the owner of the task.

However, for disconnected applications, the task owners are assigned manually so that they can go and take action on the respective tasks as the tasks cannot be provisioned using provisioning job.

If you're asking about how to route a request to a user group for approval for specific entitlements, then you can achieve this with the help of workflow. You can use the custom assignment block which helps you route the request based on user property, account property, entitlement value etc.,

ex: If a user has requested for entitlement EV1 and you want to route the request to 'EV1 user group' for approval, then you can use custom assignment block in workflow. 

For more information on workflow components and how to use them, please refer to below documentation link:

https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter12-Workflows/Workflow-Compon...

Thanks,

[Rich_S_M]

Thanks for your update, Pruthvi.

Our requirements is for provisioning task and not for approvals. The requirement is to send an email notification to the provisioner(s) about action that he needs to perform. The Provisioner needs to be assigned automatically based on requested entitlement as different entitlements will have different provisioner(s)

[rushikeshvartak]

Currently saviynt does  not provide functionality to assign tasks to different provisioning team , you can raise idea ticket for same.

saviynt does provide multi level provisioning where multiple provisioning team will process task after each other but that won’t satisfy your requirements 

[pruthvi_t]

@Rich_S_M ,

Apologies, but I'm still not sure what we're trying to achieve here. Because if a task is created for a connected application, the task will be provisioned by the WSRETRY provisioning job. In this case, not sure what the role of the user group is.

For every connected application's task, admin will be the task owner and for disconnected applications, we can assign owners so that they can manually action on tasks. So the requirement of assigning tasks to user groups is not a valid business requirement.

Thanks,