This article describes how to manage the option to have an approval step for several use cases in the Users package in Smart ID. Read more here: Smart ID Workforce use cases
A script in Identity Manager Admin is used to manage the options.
See a list of all available options in the Smart ID use cases for the Users package here: Users - Options
Prerequisites
...
| Expand |
|---|
| title | Manage the option to have an approval step for "Create user" |
|---|
|
- In Identity Manager Admin, go to Home > Scripts.
- Select the script UsersScriptOptions.
In the section Approvals in the script,go to the UsersCreationApproval variable, see the example. By default it is set to false, that is, there is no approval step when a user is created.
Example: | No Format |
|---|
/*
Defines if user creation require approval.
Possible options:
* true - Approval steps are enabled.
* false(default) - Approval steps are disabled.
*/
UsersCreationApproval = true |
- If you want to have an approval step when creating a user, set UsersCreationApproval to true.
- Click Save in the upper left corner to save the updated script (or exit without saving if there are no updates).
|
| Expand |
|---|
| title | Manage the option to have an approval step for "Deactivate user" |
|---|
|
- In Identity Manager Admin, go to Home > Scripts.
- Select the script UsersScriptOptions.
In the section Approvals in the script,go to the UsersDeactivationApproval variable, see the example. By default it is set to true, that is, there is an approval step when a user is deactivated.
Example: | No Format |
|---|
*
Defines if user deactivation require approval.
Possible options:
* true(default) - Approval steps are enabled.
* false - Approval steps are disabled.
*/
UsersDeactivationApproval = true |
- If you do not want to have an approval step when deactivating a user, set UsersDeactivationApproval to false.
- Click Save in the upper left corner to save the updated script (or exit without saving if there are no updates).
|
| Expand |
|---|
| title | Manage the option to have an approval step for "Reactivate user" |
|---|
|
- In Identity Manager Admin, go to Home > Scripts.
- Select the script UsersScriptOptions.
In the section Approvals in the script,go to the UsersReactivationApproval variable, see the example. By default it is set to true, that is, there is an approval step when a user is reactivated.
Example: | No Format |
|---|
/*
Defines if user reactivation require approval.
Possible options:
* true(default) - Approval steps are enabled.
* false - Approval steps are disabled.
*/
UsersReactivationApproval = true |
- If you do not want to have an approval step when deactivating a user, set UsersReactivationApproval to false.
- Click Save in the upper left corner to save the updated script (or exit without saving if there are no updates).
|
| Expand |
|---|
| title | Manage the option to have an approval step for "Lock user" |
|---|
|
- In Identity Manager Admin, go to Home > Scripts.
- Select the script UsersScriptOptions.
In the section Approvals in the script,go to the UsersLockingApproval variable, see the example. By default it is set to true, that is, there is an approval step when a user is locked.
Example: | No Format |
|---|
/*
Defines if user locking require approval.
Possible options:
* true(default) - Approval steps are enabled.
* false - Approval steps are disabled.
*/
UsersLockingApproval = true |
- If you do not want to have an approval step when locking a user, set UsersLockingApproval to false.
- Click Save in the upper left corner to save the updated script (or exit without saving if there are no updates).
|
| Expand |
|---|
| title | Manage the option to have an approval step for "Edit user" |
|---|
|
- In Identity Manager Admin, go to Home > Scripts.
- Select the script UsersScriptOptions.
In the section Approvals in the script,go to the UsersEditApprovalvariable, see the example. By default it is set to true, that is, there is an approval step when a user is edited.
Example: | No Format |
|---|
/*
Defines if edit user require approval.
Possible options:
* true(default) - Approval steps are enabled.
* false - Approval steps are disabled.
*/
UsersEditApproval = true |
- If you do not want to have an approval step when editing a user, set UsersEditApprovalto false.
- Click Save in the upper left corner to save the updated script (or exit without saving if there are no updates).
|
| Expand |
|---|
| title | Manage the option to have an approval step for "Edit roles" |
|---|
|
- In Identity Manager Admin, go to Home > Scripts.
- Select the script UsersScriptOptions.
In the section Approvals in the script,go to the UsersEditRolesApproval variable, see the example. By default it is set to true, that is, there is an approval step when editing a role for a user.
Example: | No Format |
|---|
/*
Defines if edit roles require approval.
Possible options:
* true(default) - Approval steps are enabled.
* false - Approval steps are disabled.
*/
UsersEditRolesApproval = true |
- If you do not want to have an approval step when editing a role for a user, set UsersEditRolesApproval to false.
- Click Save in the upper left corner to save the updated script (or exit without saving if there are no updates).
|
| Expand |
|---|
| title | Manage the option to have an approval step for "Edit photo" |
|---|
|
This option is used when a self-service user edits his or hers own photo. - Select the script UsersScriptOptions.
In the section Approvals in the script,go to the UsersEditPhotoApprovalvariable, see the example. By default it is set to true, that is, there is an approval step when a self-service user edits a photo.
Example: | No Format |
|---|
/*
Defines if edit user photo require approval.
Possible options:
* true(default) - Approval steps are enabled.
* false - Approval steps are disabled.
*/
UsersEditPhotoApproval = false |
- If you do not want to have an approval step when a self-service user edits a photo, set UsersEditPhotoApprovalto false.
- Click Save in the upper left corner to save the updated script (or exit without saving if there are no updates).
|
Technical details
| Expand |
|---|
| title | Default value and outcome |
|---|
|
| Use case | Value | Outcome |
|---|
| Create user | False (default) | There will not be an approval step when creating a user |
|---|
| True | There will be an approval step when creating a user |
|---|
| Deactivate user | True (default) | There will be an approval step when deactivating a user |
|---|
| False | There will not be an approval step when deactivating a user |
|---|
| Reactivate user | True (default) | There will be an approval step when reactivating a user |
|---|
| False | There will not be an approval step when reactivating a user |
|---|
| Lock user | True (default) | There will be an approval step when locking a user |
|---|
| False | There will not be an approval step when locking a user |
|---|
| Edit user | True (default) | There will be an approval step when editing a user |
|---|
| False | There will not be an approval step when editing a user |
|---|
| Edit roles | True (default) | There will be an approval step when editing a role for a user |
|---|
| False | There will not be an approval step when editing a role for a user |
|---|
| Edit photo (self-service) | True (default) | There will be an approval step when a self-service user edits a photo |
|---|
| False | There will not be an approval step when a self-service user edits a photo |
|---|
|
| Expand |
|---|
| title | The manage options for Users script |
|---|
|
| Excerpt |
|---|
| Click here to see the whole manage options script. |
|
...
Additional information
