14.2 Defining authorizers

In ID-Synch, authorizers are users who can receive e-mail notification of a request to create, modify, or delete accounts. Requests may require their approval before proceeding.

Use the Workflow configuration menu in the Central console (nph-psa.exe) to define authorizers. Once defined, authorizers can be assigned to receive or approve requests based on:

• Targets
• Templates
• Roles
• Account group membership

Authorizers can also be login ID approvers and inventory managers. They must have a Profile ID and own accounts on a target system before they can be assigned. If an authorizer's accounts are deleted, they will no longer be a valid authorizer.

Some parameters, such as time values, can be set globally for authorizers in Configuring plugins and e-mail. If a field is left blank for an individual authorizer, the global setting will take effect.

14.2.1 Adding authorizers

To add authorizers in ID-Synch:

1. From the Workflow configuration menu click Authorizers to navigate to the Authorizer information form.

2. Type the ID-Synch login ID for a user in the Profile ID field or click Search to select the user you want to add as an authorizer.

3. Enable the Allowed to approve new user IDs check box if you want the authorizer to approve login IDs for new users.

4. Enable the Rejection blocks entire request check box if, by rejecting any part of a request, the authorizer blocks an entire request.

5. Select the Input is required before request can proceed check box to prevent the request from proceeding without this authorizer's input (either approval or rejection).

   If this check box is marked, (Input always required) displays below the authorizers name in ID approval module (nph-idi.exe), Request approval module (nph-idp.exe), and Request tracking module (nph-ids.exe).

   Note:

   When an authorizer has the Rejection blocks entire request attribute set and he or she rejects a request, this check box is overridden.

   
   

6. Type the E-mail address for the authorizer.

7. Select the Notify this user immediately check box if you want this authorizer to be notified immediately as each stage of a request is reached.

8. Type the Times of day to e-mail in 24-hour time to set up regular times that this authorizer should receive e-mail reminders.

   For example, type 9:00,13:00 to indicate that the authorizer receives ID-Synch e-mail reminders at 9am and 1pm, or type 9:00-13:OO to indicate that the e-mails should be sent at regular intervals between 9am and 1pm.

   Note:

   The Times of day to e-mail parameter overrides the global setting for e-mail notification. However, time between reminders cannot be less than the reminder interval time in the global settings. See HERE for more information.

   
   

9. Click Add.

10. Click Back to return to the Select an authorizer page or Main to return to the Central console (nph-psa.exe) main menu.

Deleting an authorizer removes the user from the list of authorizers. The user and his or her accounts still exist in the ID-Synch database.

Now you can:

• Assign the authorizer to templates. See Adding authorizers to a template.
• Assign the authorizer to roles. See Adding authorizers to a role.
• Assign the authorizer to account groups. See Managing account groups.
• Assign the authorizer as an inventory manager for a location. See Defining locations.
• Configure global e-mail notification variables. See Configuring e-mail notification.