2.6 Change the Approval or Revocation Process

You can modify the approval or revocation process for one or more resources at the same time.

  1. Select the necessary resources from the list that you want to change.

  2. (Optional) If you want the role approval to override the resource approval process, enable Role Approval overrides Resource Approval.

    For example, an office resource such as Printer is mapped to the Facilities Manager role, granting the Facilities Manager role also grants an access to the Printer.

  3. Select one of the following options to change the approval process:

    Serial

    Specify the reviewers and reorder the selected reviewers to the desired hierarchy.

    Quorum

    Specify the reviewers and set the required percentage to grant access. You can also use the slide bar to set percentage. The system grants an access if the approvals match or exceed the specified percentage criteria.

    Custom

    Select the customized workflow that you want to use from the list. The list displays the workflows that are defined using Designer. For more information about workflow, see Start workflow in NetIQ Identity Manager - Using Designer to Create Policies.

  4. Select the Revoke Approval Process from the list.

  5. (Conditional) If you want to set expiration for the selected resource(s):

    1. Enable Expiration Required.

    2. (Conditional) If you are editing the multiple roles, select Change from the Expiration list to change the resource expiration settings.

    3. Set the number of Days/Months/Years for which the access to the selected resource(s) should expire.

  6. Click Apply.