The tab in the Identity Manager user application includes a group of actions called . The actions give you the ability to work with team member tasks and requests in a workflow. Some actions are the same as those described in Section 10.0, Managing Your Work. The actions you can perform are determined by the definition of the team and the team request rights. The tab works with existing users and teams. To add new users and teams, refer to Section 8.0, Creating Users or Groups.
NOTE:The flow of control for a provisioning workflow, as well as the appearance of forms, can vary depending on how the provisioning request was defined in the Designer for Identity Manager. For details on customizing the design of a provisioning workflow, see the Identity Manager User Application: Design Guide .
A team identifies a group of users. It determines who can manage provisioning requests and approval tasks associated with this team. The team definition consists of a list of team managers, team members, and team options, as described below:
The team managers are those users who can administer requests and tasks for the team. Team managers can also be given permission to set proxies and delegates for team members. Team managers can be users or groups.
The team members are those users who are allowed to participate on the team. Team members can be users, groups, or containers within the directory. Alternatively, they can be derived through directory relationships. For example, the list of members could be derived by the manager-employee relationship within the organization. In this case, the team members would be all users who report to the team manager.
NOTE:The Provisioning Application Administrator can configure the directory abstraction layer to support cascading relationships, in which case several levels within an organization might be included within a team. The number of levels to include is configurable by the administrator.
The team options determine the provisioning request scope, which specifies whether the team can act on an individual provisioning request, one or more categories of requests, or all requests. The team options also determine whether team managers can set proxies for team members and/or set the availability of team members for the purpose of delegation.
The Provisioning Application Administrator can perform all team management functions.
The team definition itself is managed within iManager by one or more administrative managers.
The team request rights specify a list of requests that fall within the domain of a team, as well as the actions that team managers can perform on the provisioning requests and tasks.
The team request rights are managed within iManager by one or more administrative managers. The team manager is not permitted to set these rights.
Your administrator has the ability to define a scope of control for team managers depending on the business needs of the specific team. Because of this you might have different rights over requests and tasks, depending on the team for which you are acting as a manager. If you have questions about the access rights for a specific team, please contact your administrator.