Issues with Approval Task IN IDM 7.1

Hi,
I have been facing issues with Approval task.
Firstly,
I have created an Approval task with 'Mskeyvalue' and 'Mxref_mx_privilege' as attributes.
I am having a problem in the Approvers workflow UI where, we see these approvals.
It not only displays the requested privilege,but also the already provisioned privileges of the enduser to the approver.
He will not be able to recognize which privilege has been requested.
Is this an already known issue which has been sorted out in recently updated patches?
If not can you suggest me a solution for this.
Secondly,
The privilege requested by the end-user is getting provisioned to the backend,even before it is Approved.
Since Provisioning tasks are mapped through repository,privileges are getting provisioned as soon as
an entry is made into the Identity Stores.
But,Ideally the requested privilege should not be proviosioned to the backend until it is approved by the Approver.
Is this an already known isuue which has been sorted out in recently updated patches?
If not can you suggest me a solution for this.
Thanks and Regards,
Joel
Edited by: Joel Sundararajan Davis on Jul 16, 2009 11:04 AM

Joel,
I'm afraid the approval process is not quite this simple.  You are correct, if you have provisioning setup on the repository for a privilege it will be assigned immediately.  The approval task as you are using it works as an 'interrupt' to a process - nothing more.
There is an entry type called pending value that you would need to leverage in order to have privileges requested route for approval.  This pending value object is created by default for role requests in 7.1, but I'm not sure how to create a pending value for a privilege.
Which brings to mind a question - is there a reason you want users to request privileges instead of roles? In general I think the security model is setup so that users are assigned roles which contain one or more privileges.
If you do choose to use a role instead of privilege, simply set the attribute MX_APPROVAL_TASK to the id of the approval task you want to use and the system will do the rest.  The display you referenced in the first part of your question will always display the current values of the attributes you select for the user, so don't try to display the roles there - just display the user id, name, whatever else is helpful and when the approver clicks on the user id they will get the approval details which will include the requested role.
Also, please note that if you would like to assign a role directly anywhere (bypass approvals) you can use the switch: {direct_reference=1}
-Geoff

Similar Messages

  • CAT2 - Issue with workflow task TS20000460

    Reposting the query in ABAP General Section.
    CAT2 - Issue with workflow task TS20000460
    Waiting for any suggestion?
    Edited by: Amit Khare on Sep 10, 2009 3:01 PM
    Closing due to no responses.
    Edited by: Amit Khare on Sep 10, 2009 3:40 PM

    Hi,
    Could you figure out why the event linkage is breaking when you make it Gen.Task? I think, there is some problem in your wflow template. May be do a Syntax Check in the testing environment. If that time, some error happens, then by the System Defaults in the Event linkage SWETYPV, it will deactivate the linkage.
    I don't think this has got anything to do with you making TS as Gen.Task. Did you see the even trace to see what's the error for linkage breaking ?
    More info. would help in identifying the issue.
    Regards,
    venu

  • Issue with Dataflow Task in SSIS Package

    Hello Everyone,
    I have recently created an SSIS package to Load data from Flat file to SQL Server Table, it was working fine. Now I have bought a new laptop and copied the projects into this new system and changed all the connection managers(Flat files) accordingly. 
    Problem is, when I previously ran the package(With File1) in old laptop and check the distinct count on a table it was perfect, but when I ran the same package with same File on New Laptop, the Distinct count gives me an issue with particular record.
    Eg: Distinct Count with old laptop Run , 10,20,100
          Distinct Count with old New Run , 10,20,100  , 100
    There is a Space being generated for a particular record, when I run the package on new laptop with same File as old one.
    Any suggestions on this, I could not exactly figured out the Issue.
    Please Help.
    Thanks
    Thanks, Please Help People When they need..!!! Mark as answered if your problem is solved.

    You need to tell the responders here how exactly to reproduce your issue and provide the file.
    I do not know how the "distinct count" works.
    Seems to me it appears to be a database issue not SSIS.
    Arthur
    MyBlog
    Twitter
    When I perform the above query on old laptop, this gives me a result set of
    10
    20
    100
    When I perform the Same query on New laptop, this gives me a result set of
    10
    20
    100
    '100  ' (No Quotes please see the spaces generated)
    Thanks, Please Help People When they need..!!! Mark as answered if your problem is solved.
    Can you give us an idea of tasks you're having after the file source?
    Particulary see steps where you are doing some data manipulations.
    Please Mark This As Answer if it solved your issue
    Please Mark This As Helpful if it helps to solve your issue
    Visakh
    My MSDN Page
    My Personal Blog
    My Facebook Page
    I am using simple Flatfile source and oledb destination in here. this is causing issue, all the other tasks after this are loading perfectly except this.
    Thanks, Please Help People When they need..!!! Mark as answered if your problem is solved.

  • Issue with getting task:acquiredBy in a BPEL Composite.

    Hi,
    We are facing an issue with an XPath query:
    <assign name="RescanHumanTask_1_readTask">
    <copy>
    <from variable="taskAssignedMessage"
    part="payload"
    query="/taskservice:taskAssignedMessage/task:task"/>
    <to variable="RescanHumanTask_1_globalVariable"
    part="payload"
    query="/task:task"/>
    </copy>
    <copy>
    <from variable="RescanHumanTask_1_globalVariable"
    part="payload"
    query="/task:task/task:systemAttributes/task:acquiredBy"/>
    <to variable="inputVariable"
    part="payload"
    query="/client:process/client:invoice/contentType:assignee"/>
    </copy>
    </assign>
    It gives us an error:
    Error in evaluate <from> expression at line "427". The result is empty for the XPath expression : "/task:task/task:systemAttributes/task:acquiredBy".
    Can someone figure out a way of getting the System Attribute task:acquiredBy inside a bpel flow.
    Regards.
    --Irshad.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

    acquiredBy will be empty unless it is acquired by any user. you should pick value from last updated by field.

  • Issue with the Task TS17900100 in HCM p & f - Transaction brackets damaged

    Hi Experts,
    We have a custom HCM processes & forms which updates the backend INFTY as the result of execution of Step Process Forms - with the Workflow Task TS17900100
    This works absolutely fine in the DEV System. But when I transported the workflow in the QA environment it worked fine for the first time.
    Ever since then we are getting follow issue -
    The backend INFTY does not get updated.
    On further checkin in SWIA we found that step with the task TS17900100 ( Process Form ) fails and throws the following error
    1.Transaction brackets of the workflow has been damaged
    2.Exit CL_HRASR00_POBJ_WF_EXIT triggered exeception for event STATE_CHG and (target) status STARTED
    3.Error updating the process object
    Would appreciate if I can get any help in this regards.
    Thanks in advance!!
    Regards,
    Akshay..

    Hello,
    Make sure the wf is active in QA (re-activate if possible), check the transport for errors, check authorizations for WF-BATCH perhaps delete and recreate via SWU3?), refresh the buffers (SWU_OBUF).
    Please let me know if any of this helps.
    regards
    Rick Bakker
    Hanabi Technology

  • LCM issues with Workflow, Task Lists, etc.

    I have found several issues with migrating certain artifacts using LCM v11.1.1.3. Note that I have admin rights in all systems, and that there are no special characters involved. So...
    1) Workflow: when migrating Planning Units all of them migrated, including their statuses. But not all PU comments (<annotation>) and logs (<log>) nodes migrated. It happened to almost all users - some who had 1-2 comments in the source system haven't got any in the target one, some got migrated only few (e.g. out of 5 in source, they got 3 in target). Since it happened to all users, it doesn't seem to be security. I have also checked (for those who partially failed) some other nodes, sequence, action, process state - they all seem to be OK. One curiosity I've spotted in few cases, is that in source LCM file (.xml) "priorOwner" node has the name of the user I am investigating, while in the target file (taken after the migration), for that same PU, that node is empty, actually says "null".
    Any ideas why this might be happening?
    2) Task Lists: when exporting TLs (in LCM) on occassion <dataForm> node in XML file would be missing for the task that actually has it attached. Again, no special characters are used, and I am admin. Then I tried to use TaskListDefUtil, and even if that list has required node, when I try to import, the task is still not attached to the form. I had to delete all TLs, then use Util files to reimport.
    Anyone with similar experiences?
    smilo

    I had issues with tasks lists using LCM in instances where parent task name was same as child task or a task has same name planning web forms. You might also find issues with exporting webforms with business rules attached to forms where form is on plan type A and business rule is on plan type B. In this case, after LCM import, plan B business rule will lose location reference to correct plan type and get associated with web form plan type. In this case you will need to attach business rules again.

  • Issues with Windows TasK Scheduler

    Hi!
    I'm having two issues recently with Windows Task Scheduler, and I'm wondering if anyone else has experienced this and know of a resolution. We are on Windows Vista.
    Error value 2147750687 - The task we are using has been running successfully since day one, all of a sudden, two concurrent jobs got triggered the other day, thus one of them failed and gave us this error. Why would the scheduler kick off two jobs start at the same time? How can that happen? The settings are "run with the highest privileges" and run whether user is logged on or not".
    Error value 2147549186 - On this one, the task was running as scheduled, no errors in the log, then all of the sudden, after 10 minutes into the job, it re-started “due to a failure”. The settings are set to restart after 5 minutes, 3 attempts, but since it was running, and our logs do not identify any issues, what could have caused the scheduler to think there was an error?
    Joe

    Hi LordTim,
    >>However, I cannot get Access to load<<
    How did you load the Access? Did you use Access object to automate the Access applicaiton?
    If I understood correctly, did Access load successfully when you in a normal script?
    If yes, I think the issue may relative to the Task Scheduler. I suggest that you get more effective response from
    Windows Community forum about Task Scheduler issue.
    Regards & Fei
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Ovi Suite/N97 Issues with recurring tasks

    Hi
    I have finally managed to get my N97 to work with Ovi Suite (v 2.0.1.35) but am having some very annoying issues when it comes to syncing calendar & tasks (personally I wish I could just sync the calendar and not the tasks...).
    I have several recurring tasks in Outlook. They feature in my task list on Outlook as just one task with the recurring symbol next to them.  Whenever I sync my N97 for some reason, on both the N97 and Outlook the recurring tasks disappear  and are replaced by a years worth of the recurring task.  This means that both my N97 & Outlook task lists are suddenly overflowing and impossible to manage.
    Has anyone else experienced this & is there a way round this, or a way to simply sync calendar and not tasks??
    Thanks
    Nick

    Just tried editing my previous post and forum wouldn't let me.
    Anyhow, I just discovered that Ovi suite didn't mark my tasks as complete - it deleted them.  It also deleted quite a large chunk of my completed tasks as well.  I have absolutely no idea why it would have done this, but to say it's very frustrating is a massive understatement, I'm now having to rebuild my task list from memory.
    Never had any of these issues with PC Suite....
    P.S - In my Ovi suite options I have conflict resolution set to Outlook not Device...

  • Render issues with multi-task

    I have this issue with render.
    for example, i load up my projects and render it, if i run into editing problems cus i forget how to do things ill load up firefox find my solution then go back into FCP and it says i need to render the whole project again.
    anyone else run into this or know a fix?
    please and thanks

    1280x720 Motion JPEG A (.mov) @60fps
    im using the DVCPRO HD - 720p60 preset in FCP
    ive used this same setup before without issues
    hope that helps.
    also im using both stills and video

  • Issue with Capture Task Option showing correctly in MDT 2013

    I am aware that having the variable of DomainJoin will prevent the capture dialog from appearing when running the task. The problem is, even when the options are greyed out due to the domain settings not being applied from a different setting in the workflow
    it still breaks the task. 
    E.G.
    I am using the database, and have my workflow as such:
    [Settings]
    Priority=Model, TaskSequenceID, LSettings, CRoles, RApps, LApps, MMApps, MMSettings, Default
    Properties=MyCustomProperty
    DataBase:
    Location Settings: Overall settings for Domain join, wizard skips, etc info per gateway 
    Role Apps: Apps per role
    Make/Model Apps: Apps specific to a piece of hardware
    CustomSettings INI:
    Model/Task Sequence/Default:  I have tried to null out the DomainJoin settings with these variables by adding workgroup join by task ID, Model, etc and nothing seems to work. I've verified in other tasks
    that these settings take place of  what's in the DB, but the DB settings are still there, greyed out and causing an issue. 
    [X86SYSANDCAP]
    JoinDomain=
    JoinWorkgroup=WORKGROUP
    [VMware Virtual Platform]
    JoinDomain=
    JoinWorkgroup=WORKGROUP
    As shown below the model/TS specify the workgroup  (1st pic is normal deploy, 2nd is cap) but the greyed out settings are still having an effect. Skip Capture is set to NO at each level, and when I remove the Domain from the DB it shows up correctly. 
    Not sure what to do besides removing the domain everytime I want to do a capture, which seems a bit unreasonable and I don;t want my T1s in the DB. 

    I highly recommend to always use the standard Client task sequence for a build and capture. Much more reliable.
    Check out these Resources, the info is also valid for Windows 7:
    TechNet Docs - Create a Windows 8.1 Reference Image
    http://technet.microsoft.com/en-us/library/dn744290.aspx
    Virtual Hands-On-Labs - Creating a Windows 8.1 reference image  
    http://go.microsoft.com/?linkid=9845755
    How to deploy Windows 8.1 (and Windows 7) with MDT 2013 - The Resources
    http://www.deploymentresearch.com/Research/tabid/62/EntryId/186/How-to-deploy-Windows-8-1-and-Windows-7-with-MDT-2013-The-Resources.aspx
    / Johan
    Regards / Johan Arwidmark Twitter: @jarwidmark Blog: http://www.deploymentresearch.com FB: www.facebook.com/deploymentresearch

  • Issue with refresh of task flow in dynamic region

    Hi All,
    I am using Jdeveloper version 11.1.1.6. In my fusion application I am facing an issue with the task flow refresh in the dynamic region. In my application, I have one task flow in which the side navigation command links are there and on the right side it has a dynamic region which is used to display the respective task flows on click of navigation links. Now two of the links actually call the same task flow in dynamic region but for different purpose. One for creating a record and another one for modifying the record. The default activity of that task flow has a page fragment that has couple of fields. One a drop down and another one a text field for searching the accounts against which the record is to be created or modified. On click of the navigation link, I set the task flow id to be displayed and refresh the dynamic region. Now the issue is with those two links which shows the same task flow. Let's say  I searched for a record by putting some value in input text and then went on to modify flow using the modify navigation link. Then the value that I entered in search input text in the create flow stays and does not go away. I found out the cause for the issue and this is happening because of the immediate = true on the navigation command links. Now I cannot remove that because of the obvious reason that then it will start throwing exceptions for the mandatory fields when I am in middle of any flow. Is there any way to achieve it.
    Please help as this is quite urgent. I can also upload the sample application if anyone needs it.
    Regards
    Ajay

    try to put RefreshCondition in the pageDef file for that particular task Flow and try to make that condition to true only when you switch between edit or add. While switching, make sure that the mapped bean properties should also point to respective values i.e. either empty for new or holds some value for edit.
    So, when ever the above condition returns true, task flow gets refreshes and it will holds only the current values not the old values.
    i hope this will resolve your issue.

  • Approval tasks showing incorrect approval by xelsysadm

    Hi!
    We discovered a strange behaviour with approval tasks and assignment adapters.
    We configured an Approval Process with three approval tasks. The first one is approved by the target user's manager. The second one is approved by a group, determined by the Assignment Adapter. And the third is approved by a fixed group.
    When the requester starts the request, chooses three or four Resources, that uses these Approval Processes. If the manager, in the first approval step, chooses to approve all tasks simultaneously (checkbox Select All, and Approve button), then one of the task is showed as being approved by the manager, while the remaining are showed as being approved by Xelsysadm, which is not the target user's manager, ofcourse. Then, the worflow continues normally.
    Curious thing is that, if we replace the Assignment Adapter in the second approval with a fixed group or user, then the first approval always is correctly recorded as approved by the manager.
    We also tried with different Assignment Adapters, but always with the same result.
    Has anyone stepped with this issue already?
    We are using OIM 9.1.0, BP02.
    Thanks!
    Please, any suggestions to eliminate this problem?
    Edited by: Bleid on Aug 19, 2009 10:14 AM

    The statuses shown are sometimes misleeding. There is a status for when the approval starts. There is a status when the Standard Approval process completes (this is normally set to auto complete). There there is a status for when the object specific approval starts, a status for if any of the approvals have been completed, and then one for when the whole request is completed. These don't neccessarily provide you with a sure answer to the status of the request.
    I think you need to disregard the statuses for now, and just configure the approval tasks as you intend to do so. If you do not want the standard approval to be required, set the Approve task to use the auto complete adapter. Then create an approval process specific to your resource object, and set it to the default. Then create an approval task and make to uncheck the "conditional" checkbox so that it always runs. Set your assignments appropriately, and you will be done. The provisioning will not start until all tasks are completed with a complete status for the tasks within.
    If you want to know the statuses between steps, then check those between all of the steps.
    -Kevin

  • User completes approval task but system is not marking it completed

    My SP designer workflow has intermittent issues completing the task after the users does their part.  We've taken one of the web servers out due to the thought that the sessions were getting split up (IIS logs showed this happening) between the
    two servers, but the issue resurfaced today.  This user completed one task no problem, but when he completed the next task shortly after the system didn't finish up the second task so it 'stalls' (that's what I call it).  The stalled task
    doesn't get completed so the workflow doesn't move on.  I'm out of ideas.
    I've searched but can't find any reference to this behavior with approval tasks.  It is pretty straightforward OOTB approval processing but has intermittent issues.
    Anyone??
    thanks - Carlene

    Hi Victoria,
    Thank you for your reply.  Here are the responses to your questions:
    No, there are no errors in the workflow when the task is not completed.  I've turned on versioning in the task list and versioning shows the user modifying the task but the 3rd step of the system marking the task complete isn't occurring.
    No, the issue occurs intermittently which has made it almost impossible to figure out the cause.
    Creating a new approval workflow with the exact steps is really labor intensive unless we copy and modify it.  This has not been done.
    We've been looking at the ULS logs and the Workflow trace logging and what we recently discovered is an Access Denied error which has been narrowed down to a possible expired User-token and look-up to another domain by the initiator's ID.  All of our
    users are in domains other than the domain the SharePoint servers are in but there are two way trusts established.  We have since moved the approval processing step into an Impersonation step in the workflow which runs under the system account. 
    We are now watching and waiting to see if this will help.
    Another thing to note is all our users are granted access to SharePoint through AD groups which are then added to SharePoint groups.
    We are working with Microsoft on this and hopefully we can get it resolved. When we do I will post the outcome, in the meantime I welcome any other suggestions.
    Thanks - Carlene
    Carlene S.

  • Approval task SP09: Evaluation of approvalid failed with Exception: while trying to invoke the method java.lang.String.length() of an object loaded from local variable 'aValue'

    Hi everyone,
    I just installed SP09 and i was testing the solution. And I found a problem with the approvals tasks.
    I configured a simple ROLE approval task for validate add event. And when the runtime executes the task, the dispatcher log shows a error:
    ERROR: Evaluation of approvalid failed with Exception: while trying to invoke the method java.lang.String.length() of an object loaded from local variable 'aValue'
    And the notifications configured on approval task does not start either.
    The approval goes to the ToDO tab of the approver, but when approved, also the ROLE stays in "Pending" State.
    I downgraded the Runtime components to SP08 to test, and the approvals tasks works correctly.
    Has anyone passed trough this situation in SP09?
    I think there is an issue with the runtime components delivered with this initial package of SP09.
    Suggestions?

    Hi Kelvin,2016081
    The issue is caused by a program error in the Dispatcher component. A fix will be provided in Identity Management SP9 Patch 2 for the Runtime component. I expect the patch will be delivered within a week or two.
    For more info about the issue and the patch please refer to SAPNote 2016081.
    @Michael Penn - I might be able to assist if you provide the ticket number
    Cheers,
    Kristiyan
    IdM Development

  • This is about issues with the approval of product registration.

    Hi. 
    This is about issues with the approval of product registration. 
    In the absence of category for my problem dealing with Office 2007, I had to choose one of the enlightened choice categories. My proglem. Office 2007 is all well installed and functioning satisfactorily, except Picture Manager section. Every time I choose the
    display of an image through Microsoft Picture Manager, I asked about registration. Several times I answered yes, and license code, implementation of tracing the proceeds smoothly. The problem is that by next preliminary to display images with Picture Manager
    and it does not hsuker that I am registered and authenticated user. 
    What to do and what can I check out? 
    In advance thank you.

    Hello,
    The Windows Desktop Perfmon and Diagnostic tools forum is to discuss performance monitor (perfmon), resource monitor (resmon), and task manager, focusing on HOW-TO, Errors/Problems, and usage scenarios.
    As the question is off topic here, I am moving it to the
    Where is the Forum... forum.
    Karl
    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book:
    Windows PowerShell 2.0 Bible
    My E-mail: -join ('6F6C646B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

Maybe you are looking for