AnsweredAssumed Answered

User Access Review Is Not Generated In Case Of "User Attribute Change"

Question asked by Ece YILDIRIM on Jun 25, 2016
Latest reply on Jun 27, 2016 by Venkata Ramana Reddy Kanaparthy

Like • Show 0 Likes0
Comment • 5

Hello,

- We have a rule definition which determines "movers", meaning the employees whose manager and department change, within the company. And we have associated a user access review because we want to assign a review to the new supervisor of the mover (Picture 1)

- In our example, we had one user matches rule criteria (Picture 2)

- Even though under monitoring we see a line related to review generation process under "Reviews>Results", we see no review has been generated. (Picture 3, Picture 4)

Are there any step we are missing?

Picture 1

Picture 2

Picture 3

Picture 4

Venkata Ramana Reddy Kanaparthy

Jun 27, 2016 5:53 AM

Correct Answer

Hi, it may be better to contact support on the issue on how it can be taken further.

The requirement you are asking for coverage cannot be achieved with standard checkbox options on Reviewer tab.

However, if you could come up with SQL to select the reviewers for users being reviewed as per your requirements, the results could be used to create a coverage file for reviewers.

The help on reviewer coverage files has good information on required format..

See the reply in context

No one else had this question

Outcomes

Venkata Ramana Reddy Kanaparthy

Jun 25, 2016 12:56 PM

While the review will be generated using the users detected by the rule, the filters on 'Contents' tab on review definition will still apply while generating the review. Make sure the filters there do not prevent including the entitlements for that user.

To see why no items got generated, look into the database logs of that review generation run. (from the link 'Database Logs for Run 3278' in Picture 3). That will provide details as to why nothing got generated into review

2 people found this helpful

Actions

Ece YILDIRIM @ Venkata Ramana Reddy Kanaparthy on Jun 26, 2016 5:37 AM

Hello Venkata Ramana Reddy Kanaparthy,

Thanks. We checked both database logs and user access review definition but could not get a clue.

Do we need to set specific settings on User Access Review definition triggered by Rule Actions such that the results only contain information associated to the users matched by the rule?

Here is "Contents" configuration of our UA Review. As you may see no filtering is applied.

Does the setting we have in User Selection matters?

We only want "supervisors" of movers to perform Review.

Actions

Venkata Ramana Reddy Kanaparthy

@ Ece YILDIRIM on Jun 26, 2016 9:01 AM

The definition config looks good. The reviewer section will not impact what items get generated into review. Attaching the database logs for that run may help to figure out the cause.

Actions

Ece YILDIRIM @ Venkata Ramana Reddy Kanaparthy on Jun 27, 2016 5:38 AM

Hello Venkata Ramana Reddy Kanaparthy,

It seems we are not able to attach stuff on community messages. Would it be possible for us to send it to you via email?

By the way, we have another question. Considering reviews assigned via Attribute Change rules,

Are we able to calculate the reviewers dynamically based on the value of a certain attribute of the reviewer?

For ex; we want supervisors who are marked as "manager" (a custom attribute on user object), to be able to perform reviews but if supervisor is not marked as "manager" we want first supervisor in the above hierarchy that is "manager" to be assigned as reviewer. Is that possible?

Actions

Venkata Ramana Reddy Kanaparthy

@ Ece YILDIRIM on Jun 27, 2016 5:53 AM

Hi, it may be better to contact support on the issue on how it can be taken further.

The requirement you are asking for coverage cannot be achieved with standard checkbox options on Reviewer tab.

However, if you could come up with SQL to select the reviewers for users being reviewed as per your requirements, the results could be used to create a coverage file for reviewers.

The help on reviewer coverage files has good information on required format..

1 person found this helpful

Actions

5 Replies

Venkata Ramana Reddy Kanaparthy Jun 25, 2016 12:56 PM
Mark Correct
Correct Answer
While the review will be generated using the users detected by the rule, the filters on 'Contents' tab on review definition will still apply while generating the review. Make sure the filters there do not prevent including the entitlements for that user.

To see why no items got generated, look into the database logs of that review generation run. (from the link 'Database Logs for Run 3278' in Picture 3). That will provide details as to why nothing got generated into review
2 people found this helpful
Like • Show 2 Likes2
Actions
- Ece YILDIRIM @ Venkata Ramana Reddy Kanaparthy on Jun 26, 2016 5:37 AM
  Mark Correct
  Correct Answer
  Hello Venkata Ramana Reddy Kanaparthy,
  
  Thanks. We checked both database logs and user access review definition but could not get a clue.
  
  Do we need to set specific settings on User Access Review definition triggered by Rule Actions such that the results only contain information associated to the users matched by the rule?
  
  Here is "Contents" configuration of our UA Review. As you may see no filtering is applied.
  
  Does the setting we have in User Selection matters?
  We only want "supervisors" of movers to perform Review.
  Like • Show 0 Likes0
  Actions
  - Venkata Ramana Reddy Kanaparthy @ Ece YILDIRIM on Jun 26, 2016 9:01 AM
    Mark Correct
    Correct Answer
    The definition config looks good. The reviewer section will not impact what items get generated into review. Attaching the database logs for that run may help to figure out the cause.
    Like • Show 0 Likes0
    Actions
    - Ece YILDIRIM @ Venkata Ramana Reddy Kanaparthy on Jun 27, 2016 5:38 AM
      Mark Correct
      Correct Answer
      Hello Venkata Ramana Reddy Kanaparthy,
      
      It seems we are not able to attach stuff on community messages. Would it be possible for us to send it to you via email?
      
      By the way, we have another question. Considering reviews assigned via Attribute Change rules,
      
      Are we able to calculate the reviewers dynamically based on the value of a certain attribute of the reviewer?
      For ex; we want supervisors who are marked as "manager" (a custom attribute on user object), to be able to perform reviews but if supervisor is not marked as "manager" we want first supervisor in the above hierarchy that is "manager" to be assigned as reviewer. Is that possible?
      Like • Show 0 Likes0
      Actions
      - Venkata Ramana Reddy Kanaparthy @ Ece YILDIRIM on Jun 27, 2016 5:53 AM
        Unmark Correct
        Correct Answer
        Hi, it may be better to contact support on the issue on how it can be taken further.
        
        The requirement you are asking for coverage cannot be achieved with standard checkbox options on Reviewer tab.
        However, if you could come up with SQL to select the reviewers for users being reviewed as per your requirements, the results could be used to create a coverage file for reviewers.
        
        The help on reviewer coverage files has good information on required format..
        1 person found this helpful
        Like • Show 1 Like1
        Actions

User Access Review Is Not Generated In Case Of "User Attribute Change"

Outcomes

Related Content

Recommended Content