3.3 Role Approval and Revocation

After you create a role, you can modify it to define the approval process for that role. An approver can be a user, a group, a container, or a specific role.

To change the approval process for a role, select it from the list of roles or search for it using Filter. The page displays information for the role. You can define the approval process for a role using one of the following options:

  • Serial Approval: Specify multiple approvers, and define the order by selecting an approver and moving that approver earlier or later in the order by clicking the arrows at the right of the approval list.

  • Quorum Approval: Specify the approvers, then use the slide bar to specify the percent of those approvers that are required to grant access.

  • Other Available Processes: Specify the other approval process that you want to use. This approval process must be available for use in Catalog Administrator.

    NOTE:You must set up this approval process in Identity Manager Designer. For more information, see User Application: Design Guide..

If you choose None, no approvers are required for the role.

You can choose to have a revoke process or not. The revocation process can match the approval process. Also, you can define a different revocation process. Select the Revoke Process check box if you want the revocation process to match the approval process. If you define a different process, you are presented with same options that you have for defining the approval process.