Approval & Rejection Fullfillment Workflow

When the auditors or responsible person provide a decision in the business request items based upon the decision, the fulfillment and the rejection workflow will execute the decision as necessary.

View Default Workflow Configured For Fulfillment and Rejection

Please follow the instructions below to find the workflow that runs to complete the business decisions provided by the Auditor.

1. Log in to the EmpowerID web application.

2. Navigate to IAM Shop → Approval Flow Policies.

3. On the Approval Flow Policies page, select the Item Type Actions tab.

4. Search for Recertify to list all the Item Type Actions for the recertification purpose.
   
   

   Open

   

    

5. Click on the icon to open the edit view of the action type.
   
   

   Open

   

   
   
   

   1. If an Auditor Approves or Certifies a recertification business request, the workflow specified in the Approval Fulfillment WF will execute, which will update the business request status to certified and does necessary data updates based upon the Recertification Policy.

   2. If an Auditor Rejects or Revokes recertification business requests, the workflow specified in the Rejection fulfillment WF will execute, which will update the business request status and do what is necessary to delete/disable/remove the access which was revoked. This could involve removing the user from a group, for example, if it’s a group membership recertification policy.

   3. To configure how the Business Requests go through an approval process, set up the appropriate policy in the Approval Flow Policy.
      
      

Overriding Default Workflows and Hierarchy of Execution

The default workflows executed to fulfill the approval and the rejection decisions can be overridden by configuring in EID. It is not suggested to change the default workflows configured. Instead, you can add new decisions and configure custom workflows yourself. Please follow the instructions in the doc Configure Custom Decision for Business Requests to add a new business decision and a workflow.

• Auditors provide a decision on business requests for the recertification items. These decisions can be shipped decisions or custom decisions. If the decision is a custom decision and the user configures a workflow for the decision, then the workflow will be executed to fulfill the decision. The instructions and details about the custom decision are provided in the doc Configure Custom Decision for Business Requests.
  
  Configuring a workflow for a custom decision is optional; a user can opt not to configure the workflow. Still, the user must map the custom decision to a standard decision. If the user has yet to configure the workflow for the custom decision, then the fulfillment or rejection workflow will be executed based on the standard decision it is mapped to. If it is mapped to certify/revoke, then preconfigured fulfillment and rejection workflow will be executed, which is similar to providing a standard certify/revoke decision explained below.
  
  

• Whereas, if the decision is not a custom decision and is a standard certify or a revoke decision in EmpowerID, then these decisions have a preconfigured fulfillment and rejection workflow configured. If the Auditor chooses to certify the access, then the Fulfillment Workflow is executed, whereas Rejection Fulfillment WF is executed for a revoke decision. The information about how to view the default configured workflows have been discussed earlier in this doc’s section View Default Workflow Configured For Fulfillment and Rejection.