Identity Policies › Preventative Identity Policies › Workflow and Preventative Identity Policies › Use Case: Approving Titles

Use Case: Approving Titles

Forward, Inc has a company policy that states that all managers must be full-time employees. However, Forward, Inc has recently hired many contractors for special projects. To run these special projects efficiently, some of the contractors will be given the Manager title. Forward, Inc wants to require approvals from the Human Resources Director before allowing administrators to assign the Manager title to a contractor.

To automate the approval process in these situations, Forward, Inc creates a preventative identity policy, named Manager Titles for Contractors, that detects when a user title is Manager and user organization is Contractor. Forward, Inc also configures a policy-based approval process on the Modify User task. This approval process is triggered when the Manager Titles for Contractors policy is violated.

When an administrator changes a contractor's title to Manager, CA Identity Manager displays a warning message, and sends a work item to the Human Resources Director for approval. CA Identity Manager does not change the contractor's title until the work item is approved.

To configure support for this use case, you complete the following in CA Identity Manager:

• Create a preventative identity policy called Manager Titles for Contractors with the following settings:
  • Policy Condition: Users where (Title = "Manager" and Organization = "Contractor")
  • Action on Apply Policy: Warning with message "Managers must be full-time employees"
• Modify the Modify User task to include a workflow process with the following settings:
  • Workflow Process: Policy Based
  • Approval Rule Object: Identity Policy Violation
  • Identity Policy: where (Name = "Manager Title for Contractors")
  • Workflow Process: SingleStepApproval