${resource:CF_GenericContent}test

If an answer to your question is correct, click on "Verify Answer" under the "More" button.  The answer will now appear with a checkmark.  Please be sure to always mark answers that resolve your issue as verified.  Your fellow Community members will appreciate it!  Learn more.

  • State Not Answered
  • Replies reply
    1
  • Subscribers subscribers
    17
  • Views views
    253
  • Users 0 members are here
  • Locked Locked
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is it possible to use IGA to create permissions like AD groups ?

gogga

As the subject says - Is there a way that I can use IGA to request the creation of new AD groups ? Currenlty the creation of new AD groups is outside of IGA, ideally it should be inside IGA so we have full audit trail.

Parents
  • 0  

    The fulfillers support a number of change request types.The AD fulfilled out of box only supports 5 of these:

    • Remove Permission Assignment
    • Remove account
    • Add permission to user
    • Give User Access to Application
    • Remove permission from account

    The other 8 are: 

    • Assign User to Account
    • Remove user from account
    • Modify Permission Assignment
    • Modify Account Assignment
    • Remove User Access to Application
    • Add technical role to user
    • Modify Account
    • Remove Technical Role Assignment

    And while I'm not sure what all of these are explicitly for, it doesn't look like any of them are for permission creation in a target app.

    Management of new groups might be something more suited for IDM at the moment.

Reply
  • 0  

    The fulfillers support a number of change request types.The AD fulfilled out of box only supports 5 of these:

    • Remove Permission Assignment
    • Remove account
    • Add permission to user
    • Give User Access to Application
    • Remove permission from account

    The other 8 are: 

    • Assign User to Account
    • Remove user from account
    • Modify Permission Assignment
    • Modify Account Assignment
    • Remove User Access to Application
    • Add technical role to user
    • Modify Account
    • Remove Technical Role Assignment

    And while I'm not sure what all of these are explicitly for, it doesn't look like any of them are for permission creation in a target app.

    Management of new groups might be something more suited for IDM at the moment.

Children
No Data

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.