In Designer, after creating the driver object, double click the connector line and navigate to GCVs > Entitlement tab. Specify the following parameters to configure entitlements:
Enable User-Based Security Group Entitlement: Select the value as true to enable the entitlements feature for User-Based Security Group.
Enable Assignable Role Entitlement: Select the value as true to enable the entitlements feature for Assignable Roles.
NOTE:After configuring the Workday driver for entitlements, you can deploy the driver. Post deployment, perform the procedures as explained in the following sections.
You must ensure to perform a “CodeMap refresh” to fetch all the user-based security groups and assignable roles from Workday. The code map refresh, helps to facilitate the grant or revoke permissions through Identity Manager. For the procedure to refresh the code map, see Entitlement Query Settings section in the NetIQ Identity Manager - Administrator’s Guide to the Identity Applications.
You can assign the required permissions to a new user, or change an already assigned permission from an existing user to a new user. In Identity Manager, this changing of the assignment is a two step process as follows:
First, you must revoke the currently assigned resource permission, and submit the request.
Then, grant the permission to another user and submit the request again.
For more information to perform the above steps, see About the Resource Editor section in the NetIQ Identity Manager - Administrator’s Guide to Designing the Identity Applications.