Is it possible to create an access request form that allows access request ONLY for Business Roles, not the other entitlements?
If not, is there a way to disable "Add Entitlements" button for certain users (Line Managers) while allowing them to add/remove business roles for users "who are their subordinates (only)"
I'm not sure if this is applicable to your question, but you can modify the Entitlement Views and set it to include only Business Roles like in this image
Or to set the "Entitlements of initial set to show" to "Entitlement Type = Business Roles"
You can access the Entitlement views from menu "Request -> Configuration -> Entitlement Views"
Bogdan
Hi Bogdan,
Your response was quite helpful. Thanks a lot.
Please see the list of steps we applied;
1- Below entitlement view is created.
2- View is associated with Request Button as show below.
3- We logged in as one of the users that the request button is associated to.The rest of the steps are performed with this user ("Gökhan GÜR").
Below button "Add Role To User" is available in Manage Access Page for this user.
4- Clicking on the button brings us to the entitlement view selection page
Question 1: Is there a way to skip this step? This will always be the default View and we want to require minimum clicks on the UI as much as possible for the users.
5- Clicking on entitlement view brings us here to below page.
Question 2: Why the owner column of this view is empty? We were expecting to see role owners here.
Below is the full list of available roles (screenshot taken with AveksaAdmin user)
Question 3; Can we configure this entitlement view such that the roles listed here are only the ones that the current user is defined as their owner? In this example, it should be role named "Role_GG2".
Question 4; Checking the owner value for role named "Role_GG2", we see AveksaAdmin in the popup (below). However, the correct owner is person named "GÜR, GÖKHAN" as you can see in the very previous image. Is this a defect?
Anyone has any idea?
Moreover, We would like to ask again if there is a way to disable "Add Entitlements" button for certain users (Line Managers) while allowing them to add/remove business roles for users "who are their subordinates (only)"?
Why would you have line managers add users to a role like this, you should only have role owners manage their roles like this? Line managers should request access to roles for their users by using the access request (as described in post Access Request - Display "Only" Manager subordinates in "Request Access" Pages )
regards
Edwin
The Add entitlment button is defined in the Request->Configuration->Buttons. Edit the availability to limit the display to Line Managers.
There is a view "Direct Subordinates". You can use this one for the user display. Unfortunate the "All users" and "All active users" views display all the users, no matter of what permissions the requestor has in IDM.
The Add entitlment button is defined in the Request->Configuration->Buttons. Edit the availability to limit the display to Line Managers.
There is a view "Direct Subordinates". You can use this one for the user display. Unfortunate the "All users" and "All active users" views display all the users, no matter of what permissions the requestor has in IDM.