When users shop for resources in the IT Shop, they put resource items for which they are eligible to receive in their shopping carts. When ready, they submit the items in their cart to the EmpowerID system. These cart submissions are known as “Business Requests.” Each Business Request can contain one or more resource items, depending on the number of items that were in a user’s cart when submitted. The Business Request, including all the items in that request, route for approval based on the configuration of Approval Flow policies. These policies include:
Access Request Policies – Access Request policies are used to control access to resources in EmpowerID and can be used to designate different Approval Flow policies for resources based on their Access Request policy.
Approval Flow Policies – Approval Flow policies are user-defined policies that organizations create to direct Business Requests through an approval process that can involve multiple levels of approval from numerous designated approvers before users receive the requested items
Notification Policies – Notification policies specify who needs to be notified throughout the approval lifecycle of an access request.
In this model, Access Request policies are comprised of Approval Flow policies, which specify who can approve or reject requests for resources. Approval Flow policies, in turn, can be comprised of Approval Steps to direct the approval process through a sequential number of approvers. Notification policies work in tandem with these to generate approval notifications whenever access requests are raised by users.
EmpowerID includes default Access, Approval Flow, and Notification policies out of the box that generate approval tasks for those with the RBAC delegations needed to approve access requests and send email notifications to all involved parties; however, you can override this default behavior in favor of more granularity by creating or customizing these policies to specifically target designated personnel.
The topics in this section take you through the steps needed to configure approvals and approval routing within EmpowerID. The procedures outlined demonstrate building the above policies from a top-down approach by doing the following:
First, create an Approval Step with an Approver Resolver Rule
Second, create an Approval Flow policy with the Approval Step
Third, create an Access Request policy with the Approval Flow policy
Demo
The following video demonstrates how to configure approvals and approval routing in EmpowerID.
Related Docs Topics: