36.2 Performing a Manual Change

This section provides the steps required for you to complete Fulfiller tasks associated with a review run. Usually, Identity Governance sends an email notification when you have tasks in a review run.

For more information about your authorization and the review process, see Understanding Reviews.

  1. In Identity Governance, select Requests to view the fulfillment requests.

  2. Change between tabs to see requests from different areas or to see fulfillment errors.

  3. Click the fulfillment task link to expand the task description and determine the changes to be made, reason for the change, and potential SoD violations if any.

  4. In the application affected by the requested change, modify the permission according to the fulfillment task. This might impact the SoD polices or uncover unmapped users.

  5. (Conditional) The Fulfillment Administrator can view the status of the fulfillment requests on the Fulfillment Status page.

  6. Return to Identity Governance to specify one of the following outcomes for the fulfillment task:

    • Fulfilled: to indicate that you successfully changed the permission

    • Declined: to indicate you could not or did not remove the permission with a comment

    • Reassign: to assign the fulfillment task to a different user

  7. (Conditional) If any errors occur during the fulfillment process, access the Fulfillment Errors tab to see more details. From this list you can try to resolve the errors:

    1. Click Fix to go to the Fulfillment Configuration page if you have administrator access, otherwise ask your administrator to do the next step.

    2. Click Application Setup, view the settings for the application producing errors, and adjust the settings.

    3. Go back to the Fulfillment Requests > Fulfillment Errors tab, and click Retry to route the item to the correct fulfiller.

    4. If it is not possible to fix the problem, click Terminate to remove this change request item from the Fulfillment Errors tab.

  8. To complete your tasks, select Submit.

    The fulfillment process starts only after the Review Owner completes the review. Any manual fulfillment changes to the fulfillment request do not effect the Review run.