Identity Governance sends an email notification when you have tasks in a review run based on your review definition. This section provides the steps required for you to complete Fulfiller tasks associated with a review run after receiving an email to manually fulfill a request.
For more information about your authorization and the review process, see Section 4.1, Understanding Reviews.
In Identity Governance, select Requests to view the fulfillment requests.
Change between tabs to see change requests generated from different actions.
(Conditional) If you have the Fulfillment Administrator authorization, access the Fulfillment Errors tab to see if there are any fulfillment errors. To resolve the errors:
Click Fix to go to the Fulfillment Configuration page.
Click Application Setup, view the settings for the application producing errors, and adjust the settings.
Go back to the Fulfillment Requests > Fulfillment Errors tab, and click Retry to route the item to the correct fulfiller.
If it is not possible to fix the problem, click Terminate to remove the change request item from the Fulfillment Errors tab.
Click the fulfillment task link on the Access Request, Business Role, or Catalog tab to expand the task description and determine the changes to be made, the reason for the change, and any potential SoD violations.
In the application affected by the requested change, modify the permission, user, account, or role according to the fulfillment task. This might impact the SoD policies or uncover unmapped users.
Manually fulfill the change request by making the requested changes in the indicated system.
Return to Identity Governance to specify one of the following outcomes for the fulfillment task:
Fulfilled to indicate that you successfully completed the requested changes
Declined to indicate that you refused to complete the requested changes
Reassign to assign the fulfillment task to a different user
NOTE:For all of these outcomes, you can also enter comments explaining your action.
To complete your tasks, select Submit.
Manual fulfillment changes to the fulfillment request do not affect the Review run. Once you specify Fulfilled or Declined as an outcome, Identity Governance updates the Request status in the Request timeline and when a Review run is complete also updates the fulfillment status of the review item on the Review page.
(Conditional) If you have Fulfillment Administrator authorization, you can select Fulfillment > Status to view the status of fulfillment requests in the Fulfillment area. For more information, see Understanding Fulfillment Status
in the NetIQ Identity Governance Administrator Guide.