Administration Guide › Managed Services (Basic Access Requests) › Creating a Service › Define Fulfillment and Revocation Actions for the Service

Define Fulfillment and Revocation Actions for the Service

On the Actions tab, you define the entitlements and information that the system adds, modifies, or removes when a service is assigned to, or removed from, a user.

Follow these steps:

1. Click the Actions tab.

   The Fulfillment and Revocation Actions screen appears.

2. Click the Manage Fulfillment Actions or Manage Revocation Actions button.

   The Create Policy Xpress Policy screen appears.

   The following fields are pre-defined to create an action rule:

   Name

   Provides a friendly name for the action rule. This name must be unique.

   Description

   Defines the meaning of the action rule.

   Priority

   Defines which action rule executes, in the case of several action rules matching. This field is useful for defining default actions. For example, if you have multiple rules, each for a department name, it is possible to set a default by adding an additional rule with no conditions but a lower priority (such as 10 if all others are 5). If none of the department rules are matched, then the default is used.

3. Specify criteria to match under Action Rule Conditions.
4. Click the Add Action when Matched button under Add Actions

   The Add Action when Matched screen appears. On this screen, you define the actions that the system takes when the rule is matched.

5. Enter a friendly name that defines the purpose of the action.

   For example, enter "Add the Sales Manager Admin Role."

6. Select the category of action you want the system to take.

   For example, to add a role, select the Roles category.

7. Select the type of action you want the system to take.

   For example, to add or remove an admin role, select the Set Admin Role type.

8. Select the function that you want the system to perform.

   For example, to add an admin role, select the Add function.

   Note: When you select a function, a description of that function appears. This description can help you determine whether the selected function results in the system behavior you want.

9. Define the specific action that you want the system to take.

   For example, to add an admin role named "Sales Manager", enter the role name, or click the Browse button and select Sales Manager from the list of available admin roles.

10. Click OK.

    Repeat this procedure until you have added all the desired actions for this service.

11. Click OK.

    The system associates the designated fulfillment and revocation actions with the service. When a user receives the service, the associated entitlements and information are added, modified or removed.

12. You can now assign a service to a user.