Identity Policies › Preventative Identity Policies › Workflow and Preventative Identity Policies › How to Configure Workflow for Preventative Identity Policies

How to Configure Workflow for Preventative Identity Policies

You configure workflow for preventative identity policies in the admin tasks that include changes that may trigger an identity policy violation.

For example, if the preventative identity policy prohibits users from having certain admin roles at the same time, configure tasks that assign admin roles to support workflow for preventative identity policies.

Note: Before you configure workflow, create a preventative identity policy with the following settings:

• A unique policy name

  The policy name must be unique across all identity policy sets because workflow processes are associated with preventative identity policies by the policy name.

  If multiple preventative identity policies have the same name, multiple workflow processes may apply.

• Warning in the Action on Apply Policy field

  Warning is the only action that can trigger a workflow process.

After you configure the preventative identity policy, determine the tasks that may trigger the policy violation. Then, create a workflow approval policy for those tasks.