Before configuring a provisioning request definition, you need to select the Identity Manager user application driver that contains the definition. Having selected the driver, you can create a new provisioning request definition or edit an existing definition. You can also delete provisioning request definitions, change the status of a request definition, or define rights for a request definition.
Select the Identity Manager category in iManager.
Open the Provisioning Request Configuration role.
Click on the Provisioning Requests task.
iManager displays the User Application Driver screen.
Specify the driver name in the User Application Driver field and click OK.
iManager displays the Provisioning Request Configuration panel. The Provisioning Request Configuration panel displays a list of available provisioning request definitions.
The installed templates appear in dark text with a status of Template. Request definitions that are templates do not display hypertext links because they are read only.
NOTE:If the request definitions were configured to use localized text, the names and descriptions for these definitions show text that is suitable for the current locale.
Changing the driver Once you’ve selected a driver, the driver selection remains in effect for the duration of your iManager session, unless you select a new driver. To select a new driver, click the Actions command and choose Select User Application Driver from the Actions menu.
Click on the name of the provisioning request you want to use as a template in the Provisioning Request Configuration panel.
Click the Create From command in the Provisioning Request Configuration panel.
The first page of the Configure New Provisioning Request wizard displays.
Type a common name for the new object in the Name field.
For each language you want to support in your application, type the localized text in the Display Name and Description fields under Provisioning Request Localized Strings. This text will be used to identify the provisioning request throughout the user application.
To add a new language to the list, click Add and select the desired language.
NOTE:By default, a newly created provisioning request supports only English.
Click Next.
Specify the provisioned resource for the request definition, as described in Specifying the provisioned resource.
Configure the activities for the workflow associated with the request definition, as described in Configuring the workflow activities.
Specify the access rights for the request definition, as described in Specifying the access rights for the provisioning request.
Specify the initial status for the request definition, as described in Specifying the initial status of the provisioning request.
Review your settings and click Finish.
Click on the name of the provisioning request in the Provisioning Request Configuration panel.
You are not permitted to edit a provisioning request that is a template. Request definitions that have a status of Template do not display hypertext links because they are read only.
NOTE:If you have a large number of request definitions, you may want to sort the list by a particular column, such as the Name or Description. To sort by a particular column, simply click on the column heading.
For each language you want to support in your application, click the check box beside the language in the list under Provisioning Request Localized Strings, and type the localized text in the Display Name and Description fields. This text will be used to identify the provisioning request throughout the user application.
To add a new language to the list, click Add and select the desired language.
NOTE:By default, a newly created provisioning request supports only English.
Click Next.
Specify the provisioned resource for the request definition, as described in Specifying the provisioned resource.
Configure the activities for the workflow associated with the request definition, as described in Configuring the workflow activities.
Specify the access rights for the request definition, as described in Specifying the access rights for the provisioning request.
Specify the initial status for the request definition, as described in Specifying the initial status of the provisioning request.
Review your settings and click Finish.
This section provides instructions for specifying a provisioned resource that is based on an entitlement. It does not provide conceptual information about entitlements or instructions for creating and using entitlements.
For complete details on entitlements, see the <z-DocTitleInVariable>Novell Identity Manager: Administration Guide.
To use the target that is currently associated with the request definition, select the Provisioned resource radio button.
The Provisioned resource radio button is selected by default if you’re editing a request definition that refers to a valid resource. If you’re defining a new provisioning request, this radio button is not selected.
To bind the request definition to another resource that was previously defined within the currently selected driver, select the Available provisioned resources radio button, and pick a target from the dropdown list.
NOTE:If the request definition was bound to a resource that is not an entitlement, you are not permitted to change the resource.
Select a category for the provisioned resource definition in the Category dropdown list.
The category defaults to the category for the currently selected provisioned resource. Whenever you change the provisioned resource, the category for the request definition is changed as well to match the category for the resource. If you want to assign a different category to the request definition, select that category in the Category dropdown list.
To create a new resource based on an Identity Manager entitlement, click the + button.
To edit an existing resource, click the pen button.
To define the characteristics of the resource, follow these steps:
Specify the name for the resource in the Name (CN) field.
Select a category for the resource in the Category dropdown.
Specify the entitlement in the Entitlement field.
For each language you want to support in your application, click the check box beside the language in the list under Provisioned Resource Localized Strings, and type the localized text in the Display Name and Description fields. This text will be used to identify the provisioning resource throughout the user application.
To add a new language to the list, click Add and select the desired language.
NOTE:By default, a newly created provisioning resource supports only English.
Click Next.
The Provisioned Resource wizard displays a screen to allow you to provide data for any parameters required for the entitlement.
If the entitlement does not require any entitlement parameters, click Next.
The Create New Provisioned Resource wizard displays the Summary page, which provides information about the resource you’re defining.
Click Finish.
Specify whether you want the addressee for each activity to be notified by e-mail by selecting or deselecting the Notify participants by e-mail check box.
NOTE:If you select the Notify participants by e-mail check box, and the addressee has designated a proxy, the proxy will also be notified by e-mail. Delegates are not included in e-mail notifications.
For each workflow activity, optionally change the display label by clicking the icon beside the name of the activity (in this case, First Approval).
Type the display label in the Display Label field and click OK.
NOTE:The default display labels (First approval, Second approval, and so on) suggest that approvals are processed sequentially. For parallel flows, you may want to specify labels that do not imply sequential processing. For example, you might want to assign labels such as One of Three Parallel Approvals, Two of Three Parallel Approvals, and so on.
For each workflow activity, also provide the following information:
When you finish configuring an activity, you may need to scroll down to see the other activities for the flow.
Click Next.
NOTE:The number of activities you can configure varies depending on which workflow template was bound to the request definition. The number and type of entitlement parameters varies depending on the provisioned resource associated with the request.
To add a user, group, or other eDirectory object to the list of trustees for this request definition, click Add and select the object.
Once you’ve added an object, it is included in the list of trustees.
To remove a user, group, or other object, select the item in the Trustee list and click Remove.
Click Next.
To set the initial status of the provisioning request:
Select the provisioning request you want to delete by clicking the check box beside the name.
You are not permitted to delete a provisioning request that is a template.
Click the Delete command in the Provisioning Request Configuration panel.
Select the provisioning request for which you want to change status by clicking the check box beside the name.
Click the Change Status command in the Provisioning Request Configuration panel.
Click the status in the Status menu:
Click the radio button for the correct action (Grant or Revoke).
Click Finish.
Select the provisioning request for which you define rights by clicking the check box beside the name.
Click the Actions command in the Provisioning Request Configuration panel.
Click the Define Rights command on the Actions menu.
Follow the steps presented under Specifying the access rights for the provisioning request.
Select the provisioning request for which you want to define rights by clicking the check box beside the name.
Click the Actions command in the Provisioning Request Configuration panel.
Click the Define Rights with iManager command on the Actions menu.