Workflow › How to Use the WorkPoint Method › Participant Resolvers: WorkPoint Method › Specify Participants for Certify User Tasks

Specify Participants for Certify User Tasks

Certify User tasks generate the event CertifyRoleEvent. This event can be subject to workflow approval through the predefined process CertifyRoleApproveProcess.

CA Identity Manager also includes the predefined participant resolver CertifyRoleParticipantResolver, which appears in your environment by default. Participants for activities in a CertifyRoleApprovalProcess are specified through CertifyRoleParticipantResolver.

To provide participant configuration information

1. Open the Management Console by entering the following URL in a browser:

   http://hostname/iam/immanage
   

   hostname

   Defines the fully qualified domain name of the server where CA Identity Manager is installed. For example, myserver.mycompany.com:port.

2. Click Environments, and select the name of the appropriate CA Identity Manager environment.
3. Click Advanced Settings and then click Miscellaneous.
4. Define name/value pairs that specify the approvers for each role to be certified:
   • In the Property field, use the format: role-type.role-name

     role-type must be one of these roles: admin, access, provisioning.

     role-name is the name of any existing role.

     The role-name and role-type must be separated by a period (.).

   • In the Value field, specify the IDs of the approvers, and separate the IDs with a semi-colon (;).

In the following example, user certification can be approved for the following roles and by the following participants:

• jsmith01 and ajones19 can approve certification for the User Manager role
• plewis12 is the only approver for the System Manager role
• rtrevor8 and pkitt3 can approve certification for My Access Role

Note: Any unspecified roles will not have approvers for a CertifyRoleEvent.