000037979 - How approval activity behaves when change request items are grouped by category in RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Sep 24, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037979
Applies ToRSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.1.1
IssueWhen approval workflows in RSA Identity Governance & Lifecycle are defined as having changes grouped by category, the default behavior of the product is to auto-complete all approval activities in the same category if any one of the change request items is approved. 

For example, given an activity workflow where changes are grouped by category under Process Properties as shown below:

 User-added image

and entitlements are requested from two applications: Application X and Application Y, the following change request is created:

Parent WFSub WFEntitlementCategoryAssigned approvers
    WFXSWFX1     X.X1Accounting            U1,U2
    WFXSWFX2     X.X2     HR            U3,U4
    WFYSWFY1     Y.Y1Accounting            U5,U6
    WFYSWFY2     Y.Y2     HR            U7,U8

Entitlements X1 and Y1 are grouped in the Accounting category for approval. If user U2 logs in and approves X1, then X1 and Y1 approvals are auto-completed as follows:
Approval 'Accounting' completed by U2 on <date/time>
Approval 'Accounting' completed by System (because of category manager) on <date/time>

This is current product behavior. However, there are times when you may not want items in the same category to be automatically approved. This article discusses a new product feature which will allow you to configure this behavior.
ResolutionA new feature is being added to RSA Identity Governance & Lifecycle that will allow you to configure this behavior. The version and patch level has yet to be decided. Once available, this RSA Knowledge Base Article will be updated with that information.

When you edit the workflow (Requests > Workflows > Approval/Fulfillment tab > {name of workflow}> and select the grouping of changes under Process Properties and then choose category as your grouping, a new check box will display called Auto Complete Category. Choosing this option will auto complete change request items in the same category. Below is a sample screenshot of the new option:
User-added image

  1. This change will take effect for new processes and new jobs only. This will not effect existing jobs.
  2. The Resource Assignment on any Approval/Activity Nodes in the workflow must be set to ANY.

User-added image