11.4 Role Approval and Revocation

After you create a role, you can modify it to define the approval process for that role. An approver can be a user, a group, a container, or a specific role.

To change the approval process for a role, select it from the list of roles or search for it using Filter. The page displays information for the role. You can define the approval process for a role using one of the following options:

  • Serial Approval: Specify multiple approvers, and define the order by selecting an approver and moving that approver earlier or later in the order by clicking the arrows at the right of the approval list.

  • Quorum Approval: Specify the approvers, then use the slide bar to specify the percent of those approvers that are required to grant access.

  • Other Available Processes: Specify the other approval process that you want to use. This approval process must be available for use in Catalog Administrator.

    NOTE:You must set up this approval process in Identity Manager Designer. For more information, see User Application: Design Guide.

If you choose None, no approvers are required for the role.

You can choose to have a revoke process or not. If Revoke Process Required is enabled, the revocation process follows the same process that is defined for role approval.