Highlighted
schwoerb Absent Member.
Absent Member.
388 views

Maintain Role Dependency

I am wondering if anyone has built a good way to maintain role dependency for Role and Resource requests.

Specifically I am trying to setup a way to ensure that when a person looses one role that self service (and approved) requested roles and resources, that are dependent on that role, start a workflow to remove dependent role and resources.

As an example, people in DeptA have a role by virtue of job data being in HR. They request access and are approved for additional roles (DeptA-RoleX) and services (DeptA-App42) based upon their job duties. When they take a new job in DeptB and loose the role for DeptA, that this starts a workflow to remove their DeptA-RoleX and DeptA-App42.

Thanks

Brad
Labels (1)
0 Likes
2 Replies
Micro Focus Expert
Micro Focus Expert

Re: Maintain Role Dependency

Hi Brad,

On 2018-09-27 17:44, schwoerb wrote:
>
> I am wondering if anyone has built a good way to maintain role
> dependency for Role and Resource requests.
>
> Specifically I am trying to setup a way to ensure that when a person
> looses one role that self service (and approved) requested roles and
> resources, that are dependent on that role, start a workflow to remove
> dependent role and resources.
>
> As an example, people in DeptA have a role by virtue of job data being
> in HR. They request access and are approved for additional roles
> (DeptA-RoleX) and services (DeptA-App42) based upon their job duties.
> When they take a new job in DeptB and loose the role for DeptA, that
> this starts a workflow to remove their DeptA-RoleX and DeptA-App42.


You can attach meta-data to roles, e.g. add categories such as
"department-DeptA" or put them in hierarchical roleDefs containers. Then
in a loop-back driver, start a request to remove additional roles that
relate to DeptA if the DeptA role is removed.


--
Norbert
0 Likes
Knowledge Partner
Knowledge Partner

Re: Maintain Role Dependency

On 9/28/2018 4:47 AM, Norbert Klasen wrote:
> Hi Brad,
>
> On 2018-09-27 17:44, schwoerb wrote:
>>
>> I am wondering if anyone has built a good way to maintain role
>> dependency for Role and Resource requests.
>>
>> Specifically I am trying to setup a way to ensure that when a person
>> looses one role that self service (and approved) requested roles and
>> resources, that are dependent on that role, start a workflow to remove
>> dependent role and resources.
>>
>> As an example, people in DeptA have a role by virtue of job data being
>> in HR.  They request access and are approved for additional roles
>> (DeptA-RoleX) and services (DeptA-App42) based upon their job duties.
>> When they take a new job in DeptB and loose the role for DeptA, that
>> this starts a workflow to remove their DeptA-RoleX and DeptA-App42.

>
> You can attach meta-data to roles, e.g. add categories such as
> "department-DeptA" or put them in hierarchical roleDefs containers. Then
> in a loop-back driver, start a request to remove additional roles that
> relate to DeptA if the DeptA role is removed.


I think the point is, UA/RBPM by itself does not really support this use
case, directly. You would need logic in a driver to do the work.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.