8 Managing Pending Approvals
This chapter describes some of the task actions in the following sections:
Note:
The features related to performing task actions in the Inbox section are provided by Oracle SOA. Refer to SOA documentation for detailed information about the task actions.
8.1 About Pending Approvals
When a request is submitted, the request service initiates the approval as a task in Oracle SOA Server. This task is assigned to the approver.
Oracle Identity Manager request service interacts with SOA Server to handle various aspects of human interaction in Oracle Identity Manager workflows. This request service is used to assign tasks to roles and users. You can perform various operations upon tasks assigned to you. For example, you can approve, reject, or claim a task, or request for more information. The process flow in corresponding Oracle Identity Manager workflow is dependent on the outcome of given tasks.
See Also:
Developing Workflows in the Developing and Customizing Applications for Oracle Identity Governance for information about approval workflows
Further processing of the request by request service remains pending, which is subject to the outcome of the corresponding task. The approver can access either the Inbox section or the Pending Approvals page of the Identity Self Service that lists all the tasks assigned to the approver. The approver can now act upon this task and set its outcome, for example, approve or reject. After the task outcome has been set, the request service resumes the processing of the request that is based on the task outcome.
On successful submission of requests, the request service creates Human Tasks in SOA and assigns them to users or roles in Oracle Identity Manager. Authenticated users can view the tasks waiting for action in the Inbox or in the Pending Approvals page.
8.2 Viewing Pending Approval Tasks
You can view the pending approval tasks from the Inbox or the Pending Approvals.
To view for approval details:
8.3 Adding Comments and Attachments
You can add comments and attachments prior to performing any operation on the task such as approving, rejecting, or reassigning the request.
An attachment can either be a hyperlink or an actual file. It is recommended that the size of the file attachment that you upload be less than 2 MB. If you want to upload file attachments of size greater than 2 MB, then you must change the ADF configuration and increase the size limit.
To add comments and attachments:
-
Log in to Identity Self Service.
-
Click Self Service. Self service Home page is displayed.
-
Click Pending Approvals box. The Pending Approvals page is displayed.
Click the task for which you want to add comments or attachments. The details of the task are displayed in a new tab.
-
To add a comment:
-
Click the Approvals tab.
-
In the Comments section, click the Create icon. The Create Comment dialog box is displayed.
-
In the Comment field, enter the comments related to the task, and then click OK.
-
Select Task Actions, Save to save the comment.
-
-
To add an attachment:
-
Expand the Attachments section if it not already expanded.
-
In the Attachments section, click the Add icon. The Add Attachment dialog box is displayed.
-
Select one of the following options as the attachment type:
-
URL: Specify the URL to an attachment.
-
Desktop File: Allows you to select and upload a file from the desktop.
Note:
By default, uploading of all file types are supported. However, the file types that will be allowed for upload can be configured, as follows:-
Login to Oracle BPM Worklist by navigating to the following URL and providing the WebLogic admin credentials:
http://SOA_HOST:SOA_PORT/integration/worklistapp/faces/login.jspx
-
Click WebLogic User at the top-right corner of the screen, and select Administration. The Application References page is displayed.
-
Click the Administration tab if it is not active.
-
In the File Types Allowed for Upload field, specify the comma-separated list of file type extensions that you want to allow for uploading, for example,
txt,png,pdf
. -
Click Save.
-
Restart Oracle Identity Manager server and SOA server.
-
-
Click OK.
-
-
Select Task Actions, Save to save the attachment.
8.4 Approving a Task
You can check details of the task, provide comments if required and approve the task from the Pending Approvals page.
To approve a task that is assigned to you:
Note:
A self-registration request is assigned to the System Administrator role by default. Before you can approve a self-registration request, as a member of the System Administrator role, you must claim a self-registration task and update the request if required and then approve it.
8.5 Rejecting a Task
You can check details of the task, provide comments if required and reject the task from the Pending Approvals page.
To reject a request that is assigned to you:
- Log in to Identity Self Service.
- Click Self Service. Self service Home page is displayed.
- Click Pending Approvals box. The Pending Approvals page is displayed.
- Select the task that you want to reject.
- Click the task to view its details in a new tab and provide any comments. Then, click Reject. The task is rejected and is no longer displayed in the tasks table of the Approval Details page.
8.6 Reassigning a Task
You can check details of the task, and reassign or delegate the task to another user from the Pending Approvals page.
To reassign a request that is assigned to you:
8.9 Skipping Current Assignment
In the Pending Approvals page, the Skip Current Assignment option in the Actions menu or Task Actions menu is displayed only to users with the System Administrators role. This option is not displayed for end users.
Skipping the current assignment is not a valid action for an approver. If an approver chooses this action, then the corresponding request fails. Therefore, this option can be hidden for system administrators also. See Hiding the Skip Current Assignment Option in the Developing and Customizing Applications for Oracle Identity Governance for information about hiding the Skip Current Assignment option.
8.10 Claiming a Task
You can claim a task that is not assigned to you from the Pending Approvals page.
To claim a task that is not assigned to you:
-
In the Approval Details page, search and select the request that you want to claim.
-
From the Actions menu, select claim.
A message is displayed stating that the request has been assigned to you.
8.11 Modifying Grant Duration
You can modify the grant duration of the role, account, or entitlement which are pending for approval from the Pending Approvals page.
To modify the grant duration of the role, account, or entitlement to the user:
-
In the Approval Details page, search and select the request for which you want to modify the grant duration.
-
Open the request details.
-
Click Claim in the request details page.
-
In the Request Details tab, click the Grant Duration icon.
-
Modify the values in the following fields:
-
Start Date: The start date when the role, account, or entitlement will be provisioned. This must be a future date. This field is not available for modification if the role, account, or entitlement is already assigned to the user.
-
End Date: The end date when the role, account, or entitlement will be revoked.
For detailed information about grant duration, see Adding and Removing Grant Duration.
-
-
Click Update in the Request Details tab.