|
|
|
When CA Identity Manager integrates with CA RCM, you can configure CA Identity Manager to validate proposed changes against patterns in the CA RCM role model.
In this example, an administrator is using the Modify User task in CA Identity Manager to assign the HR role to a contractor, who will be working with the company for three months.
The Modify User task has been configured to allow administrators to click a Check Compliance button to check for any violations of the company's existing role model before assigning new roles.
When the administrator checks the assignment of the HR provisioning role, two messages appear. The first message is a warning that states that assigning a contractor the HR role violates a pattern in the role model because the contractor does not meet the rule for this role in CA RCM. The second message is an alert that states the HR role has too many users.
The administrator can submit the task, even though there are two pattern violations; however, he must enter a justification for ignoring the warning message. The administrator adds a note to the transaction stating that the user is a temporary contractor and submits the task.
The note is recorded in the task's history, which is visible in the View Submitted Tasks task.
| Copyright © 2010 CA. All rights reserved. | Email CA Technologies about this topic |