...
The possible decisions are generally set to certify, disable or delete. However, these decisions are configurable. This configuration is described under decision configuration at the end of this page.
In this post, we will create a group validity type recertification policy and add a target to it.
...
Log in to the EmpowerID web application as an auditor or other person with the ability to configure audits.
On the navbar, expand Compliance and select Recertification.
On the Recertification page, select the Recertification Policies tab.
Then click + icon to create a new Recertification Policy
The policy details page opens up.
Select policy type as ‘Account Validity.’ Enter any name, display name, and description.
Click on Save.
Add the target type “Group” to the policy createdClick on the '+' icon at the bottom of the policy details page to add the target.
The attestation policy target section opens up.
Under the type dropdown, select ‘Group.’
Under the enter a group name to search dropdown, search for a group and select it.
Click on Save.
Add the target type “Location” to the policy createdClick on the '+' icon at the bottom of the policy details page to add the target.
The attestation policy target section opens up.
Under the type dropdown, select ‘Location.’
Under the select a location dropdown, search for a location and select it.
Click on Save.
Add the target type “Management Role” to the policy createdClick on the '+' icon to add the target
The attestation policy target section opens up.
Under the type dropdown, select ‘Management Role.’ Enter the name of the Management role.
Click on Save.
Add the target type “Set Group” to the policy createdClick on the '+' icon at the bottom of the policy details page to add the target.
The attestation policy target section opens up.
Under the type dropdown, select ‘Set Group.’
Type a query name under “enter a query-based collection name”.
Click on Save.
The group validity policy type with four target types are created.
Insert excerpt IL:External Stylesheet IL:External Stylesheet nopanel true
Decision Configuration for Group Validity
The possible decisions for business role and location membership group validity recertification policy type are configurable. For configuring them we need to take the following steps.
Log in to the EmpowerID web application
On the navbar, expand IT Shop and select Approval Flow Policies.
On the Approval Flow Policies page, select the Item Type Actions tab.
Then search for Recertify Group Validity.
Click on the Recertify Group Validity and scroll down to select Decisions for Approval Flow Steps.
Click on the + icon to add more approval decision if needed.
As shown in the above screenshot, what happens when the approval decision is taken as
Certify - No workflow no fulfillment work flow is needed. Note that this is configurable.
Delete - Recert Delete Group Fuldelete group fulfillment work flow is started. Note that this is configurable
Disable - Disable group fulfillment work flow is started.You can also edit or change the workflowworkflows that should execute as per an approval decision. Just click on the edit icon on the above image.
To see how the business requests generated are grouped for approval, we need to open the approval step selected by right click and open in new window. Here the approval step is group owner approval as shown in the image above. In this case it is bundled as per two rule type types ( resource owner and target resource line manager) as shown in the image below. Therefore, So based on what is configured in approval step the business requests generated will be routed to for approval.
Workflow used: When you edit the Item Type Actions named Recertify Group Validity, you would be able to see the fulfillment workflow. For this policy type item the fulfillment workflow is selected is Group Membership fulfillmentExpiration Notification as shown in the image below. For the fulfillment the selected workflow is run. This workflow assignment assigned is configurable as well. You can delete it and select another workflow if needed.
...
We have created the group validity recertification policy and added target to it. the next step would be to creat an audit and add the group validity policy to it.