{"id":4899,"date":"2013-01-03T12:59:55","date_gmt":"2013-01-03T16:59:55","guid":{"rendered":"http:\/\/onlineappsdba.com\/?p=4899"},"modified":"2013-01-03T13:05:44","modified_gmt":"2013-01-03T17:05:44","slug":"topic-5-part-i-approval-workflows-and-requests-configuration-certification-oracle-identity-governance-suite-11g-essentials-exam-1z1-459","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2013\/01\/03\/topic-5-part-i-approval-workflows-and-requests-configuration-certification-oracle-identity-governance-suite-11g-essentials-exam-1z1-459\/","title":{"rendered":"Topic 5 : Part I : Approval workflows and Requests Configuration – Certification Oracle Identity Governance Suite 11g Essentials Exam -1Z1-459"},"content":{"rendered":"

This post covers topic 5 (Part I) of certification 1Z1-459\u00a0Oracle Identity Governance Suite 11g Essentials<\/a><\/strong>\u00a0 i.e.\u00a0Approval workflows and Requests Configuration<\/strong><\/p>\n

Topic 5 Approval workflows and Requests Configuration\u00a0<\/strong>of certification 1Z1-459 contains following sub topics<\/p>\n

5.1<\/strong> Describe Workflow and SOA composites development using Jdeveloper and WF Composer
\n5.2<\/strong> Create approval workflows for serial and parallel approvals
\n5.3<\/strong> Describe Request related artifacts like datasets and profiles
\n5.4<\/strong> Describe approval policies, approval selection methodology
\n5.5<\/strong> Configure request for accounts and entitlements<\/p>\n

 <\/p>\n

Oracle Identity Manager (OIM) let users to request entities like roles<\/strong>, resources<\/strong>, or entitlements<\/strong>. OIM also enables administrator to approve<\/strong> or deny<\/strong> these requests.<\/p>\n

1. Request<\/strong> : is an entity (or task) created by user in OIM to perform an action<\/strong> that requires permission to be approved before that action can be performed. For example request can be “granting a role to a user<\/strong>” or “creating a user<\/strong>” or “assign a resource to a user<\/strong>” in OIM.<\/p>\n

2. Types of Requests<\/strong> : Requests in OIM are mainly of five types
\na) User Management<\/strong> – create user, modify user etc are requests of type user management
\nb) Role Management<\/strong> – create role, modify role, assign role etc are requests of type role management
\nc) Account Management<\/strong> – enable account, disable account, modify account etc are request of type account management
\nd) Entitlement Management<\/strong> – provision entitlement and revoke entitlement are request of type entitlement management
\ne) Provisioning<\/strong> – “provision application instance” and “access policy based application instance provisioning” are requests of type Provisioning<\/p>\n

More in detail about Request Types<\/strong> in Managing Requests in OIM Users Guide<\/a><\/p>\n

3. Types of approval workflow<\/strong> associated with Requests: A request can contain two types<\/strong> of approval workflows
\na) Request-level workflow<\/strong> : This type of approval workflow contains high-level information associated with “entire request”
\nb) Operation-level workflow<\/strong> : This type of approval workflow is associated with operation (create user, provision resource, ) that Identity Manager is to grant to a user through request.<\/p>\n

Note:<\/strong> Request-level approval workflow is initiated first and then Operational-level approval workflow is initiated for a request<\/span>.<\/p>\n

4. Stages of request<\/strong> : Each request goes through specific lifecycle after request is created in OIM.
\na) Created
\nb) Obtaining approval
\n–ba) Waiting for Request-Level Approval
\n–bb) Waiting for Operational-Level Approval
\nc) Approved
\nd) Rejected
\ne) Operation Initiated
\nf) Failed
\ng) Withdrawn
\nh) Completed<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

5.<\/strong> Request can have following type of users
\na) Requester<\/strong> : User\/system who raises a request. Request can be raised by system based on access policy ()
\nb) Beneficiary<\/strong> : User for whom this request is being created. Requester can request for him\/her self or for others
\nc) Request-Level Approvers<\/strong> : User who approves request at request-level
\nd) Operation-Level Approvers<\/strong> : User who approves request at operation-level<\/p>\n

6. Components that make up a request :
\na) Request User<\/strong> – Requester , Beneficiary, Approvers (Request-Level and Operation-Level)
\nb) Target Entity<\/strong> – is entity like Role, Organization, Resource, or Entitlement for which request is being made
\nRequest can also optionally have
\nc) Approval Policies<\/strong> – Approval policy associates a request with approval workflow (request-level and operation-level). There can be multiple approval policies for a request.
\nd) Email Notification<\/strong> – Information about event occurring in requests life cycle are sent to requester, beneficiary, approvers etc via email notification<\/p>\n

7.<\/strong> Request-level approval and Operation-level approval workflows are deployed as SOA composites<\/strong> on SOA servers.<\/p>\n

8.<\/strong> SOA composite for OIM is an application deployed on SOA server and registered with OIM server. More on SOA composite and Workflow in OIM<\/strong> at OIM Developer Guide – Developing Workflows for Approval and Manual Provisioning<\/a><\/p>\n

9.<\/strong> You can deploy SOA composites using Jdeveloper (IDE) or ANT script . More on<\/p>\n

10.<\/strong> Request Catalog<\/strong> : contains entities (roles, application instances, and entitlements) that user can request in Oracle Identity Manager .<\/p>\n

11. Request Cart<\/strong>: contains list of items that user can select from request catalog.<\/p>\n

 <\/p>\n

Further Reading
\n<\/strong><\/span><\/p>\n