cancel
Showing results for 
Search instead for 
Did you mean: 

Parallel Approvals in IDM

jaisuryan
Active Contributor
0 Kudos

Hi Experts,

Is it possible or anyone has done parallel approval task configuration in your landscape?

When I raise a request, IDM calculates approver list and sends the request sequentially to the approvers  to approve.

If i have 2 roles (Role 1 and Role 2) to requested for an Position Business Role, it goes to role owner of Role 1. once approved by that role owner, it goes to role owner of Role 1.

Each role owner has 5 working days to approve else times out. If i raise a request with 10 roles, the worst case (if the role owner approves at the 5th day of this stipulated 5 days), then the request takes 50 days to get it approved. The worst'est situation is, if the last role owner rejects or times out the request, the whole request is declined. This is causing lot of trouble for us.

Has anyone configured IDM such that it sends the request to each respective role owners in parallel?

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Jaisuryan,

I don't understand why the approvers are calculated sequentially. Please correct me if I am wrong. My understanding is...

"There is a business role for which you want to request Role 1 & Role 2. For the both roles, the apporvers are calculated dynamically."

So, when both the roles are requested in a single request, IDM calculates the approvers for both the roles and awaits the action (approval/decline) from the approvers.

That means, approver of Role 1 will have the approval request in his/her inbox and can approve. On approval/decilned, the assignemnt will be processed accordingly.

Similarly, approver of Role 2 will have the approval request in his/her inbox and can approve. On approval/declined, the assignemnt will be processed accordingly.

If you can share a screenshot of your configuration, that may help to get more understanding.

All the possible types of approval mechanisms can be found in this document.

By the way, which version of IDM you are having ?

~ Krishna

Former Member
0 Kudos

If you have an IdM version before 7.2 SP6 or use the "7.1 style" approvals, a way to have parallel approvals is to create new request objects (use a self created entry type for the new objects) using Javascript in a ToGeneric pass in a task/job after the UI task. The functions uIS_Create, uIS_SetValue and uProvision come in handy for this.

In the task called by uProvision you can do anything: approvals, mailings, setting status to the original object (hand over the original MSKEY to the new objects in some attribute), etc.

Answers (1)

Answers (1)

jaisuryan
Active Contributor
0 Kudos

Attached is the screenshot of our workflow configuration. I was not part of implementation hence no idea why it was made like this. when the request is raised, the 1st two tasks find the complete list of role owners, but only 1st role owner is notified of the request. once approved by role owner, the request goes to root task and removes the 1st approver from the request and sets up second approver and so on.. once all approvers have approved, the request finally goes for GRC check (Access Manager Review). then one final notification is sent to manager of the position that request is approved.

We are in 7.2 SP8 but the approval workflow was 1st configured in 7.2 SP3 2 years back. now I have taken over the system for BAU support and want to sort this one out. I saw the document given by Krishna. We haven't enabled "Enhanced Approval UI" yet. I will enable that and will try to configure new workflow as per the document provided. Meanwhile it would be great if anyone has configured already and can share screenshot of your configuration and expert suggestion and advice are welcome. Thanks.