Screens and Tabs › Tabs › Task Management Tabs › Approval Policy Tab

Approval Policy Tab

This tab lets you select and configure a workflow process for each event that the task initiates. This tab contains the following fields:

Approval Rule

Define an approval rule for the object of this event

Select an Object

• Initiator of the task – The CA Identity Manager administrator who executes the task.
• Primary object of the event – The primary object associated with the event.
• Secondary object of the event – The secondary object associated with the event relative to the primary object.

The following are the objects for an admin task:

• Primary Object of the Task – The primary object associated with the task
• Initiator of the Task - The CA Identity Manager administrator who executes the task.
• Identity Policy Violations - For identity policy violations, the rules are based on the policy name of the identity policy that caused the violation, for example, Policy Name EQUALS TitlePolicy. The violation message is displayed on the Task Details tab of the Approval Screen which is the same as the View Submitted Tasks Task Details. The SOD violation message is displayed under a new section heading named Identity Policy Violation. An approver can view these messages and decide to approve or reject the task.

  Note: For existing environments you must set the Organization screen manually for the Modify Admin Task to display the Organization search page.

Rule Evaluation

Define how a rule is evaluated for the event.

• Always evaluate the rule
• Evaluate only if an attribute specified in the approval rule changes

  Note: For more information, see Rule Evaluation.

Policy Order

An integer value. A rule with a lower integer value has a higher priority, and is evaluated before a rule with a higher integer value. The priority for each rule determines the following:

• The order in which approval rules are evaluated
• The order in which workflow processes are started, for those rule that are true

Policy Description

Non-mandatory, non-searchable string description attribute.

Maximum number of characters supported: 255 characters

You can enter bundle/key information in the following format for the description:

$ (bundle=<fully qualified resource bundles name> : key=<key>)

Note: If the Approval Policy Description exceeds 255 characters, an error message is displayed.

Workflow Process

Select and configure the workflow process that executes if the rule evaluates to true.

Note: The Workflow Process list includes processes for use with both the template method and the WorkPoint method:

• When a template method process is selected (either SingleStepApproval, TwoStageApprovalProcess, or EscalationApproval), the page expands to enable participant resolver configuration.

  When a WorkPoint method process is selected, the page does not expand. Participant resolvers are configured in WorkPoint Designer.

  If EscalationApproval for event workflow is selected, a filed called Approval Timeout (min) is displayed. This field is specified in minutes and cannot be empty. By default, the time is set to 60 minutes. If a non-numeric/non-integer/non-positive timeout value is specified,a validation error is displayed.

More Information:

Policy-Based Workflow

How to Configure an Approval Policy

Dynamic Resolver