OIM approval workflow creation

Hi Gurus,
Is it possible to give permission to a group in the OIM to be able to create/manage Resource's approval workflow? If so, what I should do? Which permission are needed?
Or just system administrator is able to do that?
The group was created just to perform that activity and it can't have another privileges.
I would appreciate any help.
TiA,
Carlos

In pre 11g there is no really good way to do this as approval workflows are defined in the design console. One of the things I am excited about 11g is that the approval workflow is moved to BPEL (http://iamreflections.blogspot.com/2010/09/oim-11g-approval-workflow-orchestration.html)
If you need to support this in pre 11g you can either try to configure the design console to just have the approval workflow menu item. i haven't tried that but it does not look simple or straightforward to me.
If the approval workflows are simple you could try to go over the custom resource object or custom menu item road. A third option would perhaps be to let them define the workflows in a free standing tool and then parse in the changes and use the OIM API to update the approval workflows.
Best regards
/Martin

Similar Messages

  • OIM Approval Workflow starting Exception

    Hi to all. I'm working with approval workflow in OIM11g and I've followed the OBE for the design of a ResourceSerialApproval Workflow. When submitting a request which is to be approved by this workflow at request level, the request creation fails with this exception:
    IAM-2050014:An error occurred while initiating approvals for request oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Unable to instantiate the workflow process due to null. The corresponding error message is {1}.
    I've searched this forum for the error and seen that maybe it could be caused by a bad props file when registering the workflow: this is NOT my case. The workflow gets correctly deployed.
    Could anyone help me?
    Please I have no idea on how to solve this problem.
    Thanks in advance,
    Giuseppe.

    Hi,
    Open your approval workflow in Jdev, open "ApprovalProcess.bpel" file in source mode,
    Check if custom attribute is getting assigned before the payload is loaded:
    something like
    <copy>
    <from variable="resourceAdmins"/>
    <to variable="initiateTaskInput" part="payload"
    query="/ns2:initiateTask/task:task/task:payload/task:ResourceAdministrators"/>
    </copy>
    <copy>
    <from>
    <payload xmlns="http://xmlns.oracle.com/bpel/workflow/task">
    <RequestID xmlns="http://xmlns.oracle.com/bpel/workflow/task"/>
    <RequestModel xmlns="http://xmlns.oracle.com/bpel/workflow/task"/>
    <RequestTarget xmlns="http://xmlns.oracle.com/bpel/workflow/task"/>
    <url xmlns="http://xmlns.oracle.com/bpel/workflow/task"/>
    Regards,
    Raghav.

  • OIM Approval Workflow Scenario/Question

    Hello,
    Can anybody please explain how the approval workflow actually works in OIM?
    Scenario - After a user does self registration using the web console - how can we specify tasks in between that workflow - so that the user's manager should receive/approve the request first and then suppose then the request goes to some Department Head for his approval and then only the user will receive and confirmation email for logging into OIM.
    I understand the Provisioning workflow perfectly from OIM User Form to PRocess Form and from their to Target. But really want to understand this 'Approval/Self REgistration' workflow. Can anybody explain me with the steps that are needed to be configured in OIM Design Console for the 'scenario' explained above.
    Many Thanks!

    Hi,
    There is one possible solution for your requirement. I jsut the forget the name of the workflow which trigger while self registration.
    You can do one thing in that process add two task which assign task to manager and once he approved the request task will be assigned to deapartment head and once he approved the user will be created in OIM.
    Task will be assigned not as approval but as asisgned task, if its ok with you; just try this and let me know.
    Regards
    Alabhya Goel

  • OIM Approval Workflow

    Hi,
    I need to implement the following scenario in OIM.I have following 3 types of users in OIM . Employee,Organization Admin and Resource Admin.
    1.Organization Admin logs into OIM and request a resource to an user.While requesting,Organization admin needs to enter some information about the user (it could be either process form or resource form)
    2.Once the request is submitted,Resource Admin should see it in his pending task list.
    3.Resource admin approves the request and the user gets provisioned to the target system.
    I tried creating a process form,in which the admin can enter user details,but I am not sure how to attach approval workflow in that.
    When I tried using Resource Form,I am not able to populate user's information in the form.
    Any idea about how to implement this scenario?.Thanks in Advance.

    Hey Nitesh...
    Thanks for the Reply....
    Sorry i mistakenly put process form in place of object form. By default approver is only able to see only first name and last name in user details. What additional configuration i need to do so that approver can see the object form also for that user and then can approve/Reject. As the approver is from different organization so not able to view user details....but as per requirement have to show only the requested resource object form!
    Also i have couple of other questions which i am not able to crack....appreciate if you can help me to figure out the solution :)
    1. When i requested a resource for multiple users then approver is not able to approve it for few users and reject it for others under same request. Does OIM provide any kind of customization which can help me to achieve this.
    2. Once my user get provisioned in any resource lets say AD after that when i modified the user OIM profile and save it, it should modify the AD account also if the modified attribute is mapped in Resource form using prepopulate. Is this valid requirement?
    Edited by: user10781632 on Feb 26, 2009 5:35 AM

  • OIM , Approval WorkFlow Page Error

    Dear All,
    Kindly if anyone can share some experience on the following issue:
    1 - I have IDM 9.1.0.x
    2 - To define the approval workflow when I try to open the workflow designer i.e Manage Resources>Manage> select resource ... it shows error page with no error number just a link to IDM admin.
    My question is:
    1- Could it be due to some issue in connector of the relevant application (MySQL on backend> GTC with Java customized connector)?
    2- Or it could be a problem in the IDM system itself related to some configurations, missing installation components.
    what should I check to verify if it is some issue with the IDM servers settings?
    Thanks

    thanks for your reply,
    can you please be a little more elaborated and guide me how to remove this error, when click on the resource instead of opening workflow designer it opens a page with a link to admin, not showing any error just "A system error has encountered" message.
    thanks.

  • Defining Approver list in BPEL -OIM Approval Workflow

    Hi,
    We have a requirement where in we need to retrieve array of users from external resource (not integrated with OIM) and pass them as an approver list during resource provisioning request. As these users are not managed as a role in OIM, how do we achieve this functionality? We are retrieving these approvers as part of Java embedding in BPEL process, but not sure how to pass them as a approver list in BPEL -One of them can approve the request.
    Thanks in advance

    Thanks Kevin,
    So can I assign String DataType to the comma separated OIM Logins (approvers) and BPEL will take care of assigning them as approvers appropriately? If so, then will the request will be approved if one them approves it?
    Thanks again

  • Approval Workflow deploy in Jdeveloper - SOA Server not showing up in list

    Trying to deploy an OIM approval workflow. Added my weblogic server, and tried to deploy. When it comes to selecting a SOA server, no soa servers show up in the list. Any ideas? Thanks.

    For sca deploy are you need to specify few other properties; are you putting those correctly?
    <ant antfile="${oracle.home}/bin/ant-sca-deploy.xml">
        <property name="serverURL" value="?" />
        <property name="sarLocation" value="?" />
        <property name="overwrite" value="?" />
        <property name="user" value="?" />
        <property name="password" value="?" />
        <property name="partition" value="?" />
    </ant>HTH,
    BB

  • Approval workflow for creation of organization

    Hi,
    I need to configure an approval workflow for the creation of organization. When the admin tries to create a new org, the approval should go to a admin group. The org should get created only once approval is done. I have configured an approval workflow for the Xellerate Organization resource object. I have created an unconditional task where the assignment tab has the admin group. When I test it, the org gets created without going through the approval process. Could someone please tell me what am I missing?
    Thanks,
    Supreetha
    Edited by: Supreetha on Jan 22, 2011 8:38 AM

    You'll have to raise request for Dummy Organization. It's Order for Organization so will not appear for user.
    I am not sure the full flow/complete requirement of your.
    APMU, you want approval while creating Organization into OIM.
    This is not possible OOTb when you create ORg in OIM.
    You'll create 1 dummy Org
    1 Dummy RO "OFO".
    Attach one Object Form with this RO.
    Raise request for Dummy Org and Give the name of Org on the object form for which you want approval.
    In the provisioning workflow, use OIM API to create Org into OIM.
    Done !!!

  • Approval process creation steps using JDeveloper in OIM 11g R2

    Hi,
    Please help me to create approval process creation using JDeveloper and how to use the approval process in OIM provision in OIM 11g R2.
    Thanks in Advace,
    srini

    refer developer's guide to get the detailed steps. http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#BABFFJDH
    Also refer OBE tutorial http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Custom_Approval_Process_for_Resource_Request/custom_approval_process_for_resource_provision.htm#t3
    There will be slight changes in the steps as this OBE is for 11gR1.
    High level steps:
    Create a new application using the following command
    ant -f <OIM_HOME>/server/workflows/new-workflow/new_project.xml.
    It will be created in OIM_HOME/workflows/new-workflow/process-template/ directory
    Openthe .jws file in jdeveloper and edit the default human task and add whatever logic is needed.
    Then deploy the composite after which you need to create an approval policy and link the SOA composite created
    Edited by: Durgaprasad on Apr 24, 2013 1:55 AM

  • OIM approval / provisioning workflows

    Hi All
    I have a query about OIM approval / provisioning workflows.
    Application X (e.g. Active Directory) has an OOTB connector which can provision the user and manage his role in the application. The user can raise request for role change via OIM Admin console.
    My query - Can I configure access policy/user group for creation of a base user identity in the application X. This will create user identities for all users in application X without any roles. Later user should be able to request for roles and upon approval, his role should be updated in application X.
    Can this scenario can be implemented with any OOTB connector with provisioning and role approval workflows in place. Do you see any complexity in this. Please provide your comments.

    The base provisioning van be done using access policies.
    If you want request based role management in pre OIM 11g you would have to do it over custom ROs. There are a couple of ways to do this.
    The easiest way to do is to combine the approaches in these two postings and create a custom RO that moves the user into an OIM group that has an attached access policy that manipulates the child table on the base target system RO.
    http://iamreflections.blogspot.com/2010/09/oim-howto-one-resource-object-per.html
    http://iamreflections.blogspot.com/2010/09/oim-howto-target-system-group.html
    Please take a look and see if this is understandable. I probably should write another entry that addresses this specific use case.
    /Martin

  • OIM 11.1.1.5 Approval Workflow Issue

    Hi,
    I have installed OIM 11.1.1.5. While self-registration of a user, the request is created and by default assigned to xelsysadm as the request level approver.
    However, when the approver logs in, assigns the organization to the user and approves the request, it is shown that the approval task is completed.
    But the request status doesn't change and remains "Obtaining Request Approval" and thus the user is not created in OIM.
    In SOA server, on checking the logs (soa_server1-diagnostic.log) we found the following error -
    [soa_server1] [ERROR] [] [oracle.soa.bpel.engine.dispatch] [tid: orabpel.engine.pool-5.thread-4] [userId: weblogic] [ecid: ee9b8be672bf5ad0:-72f1c18e:1399f6dc058:-8000-0000000000000108,0:1:100000006] [APP: soa-infra] failed to handle message[[
    java.lang.NoSuchMethodError: oracle.wsm.policy.model.IPolicySet.getStatus()Loracle/wsm/policy/model/IPolicySet$POLICYSET_STATUS;
    We are unable to resolve the issue, we've tried using a custom approval workflow instead of the default approval workflow.
    Kindly help.
    Edited by: 957679 on Sep 7, 2012 6:17 AM
    Edited by: 957679 on Sep 7, 2012 6:19 AM

    Hi ,
    I actually faced the same issue some time back .., it took me almost a week to resolve it ..
    This is happening basically due to incompatible version of wsm-policy-core.jar on your server . Please check all the FMW s/f installed on your server . One of them is incompatible with OIM 11.1.1.5.0 .
    Are you using BIP 11.1.1.6 by any chance .
    Thanks
    Suren

  • OIM 11gR2 - Out-of-the-box Approval Workflows

    Does anyone know of any good resources that describes the out-of-the-box approval/provisioning workflows of 11g R2? I have searched Google back and forth but found nothing. Some of the workflows are obvious by their name (such as default/BeneficiaryManagerApproval!1.0), but others are not so clear regarding their flows.
    On that same note, can one of the out-of-the-box approval workflows be configured to route to an approval group instead of single users?
    Thanks for your help!

    Instead of searching for docs in google i guess reverse-engineering on your own will be the best way to understand the approval workflows. Navigate to OIM_HOME/server/workflows/composites. It will contain all the approval workflow zip files. Unzip the required one which you want to understand and there will be a .jws file in it. Now open that in jdeveloper and open AprrovalProcess.bpel and composite.xml. It will show how the approval routes and what are the business rules written, everything. It is the best way to understand the approval workflows.
    In the same way u can make changes to the out-of-the-box approval workflows also. See this OBE tutorial to understand how you can assign the approval to a group
    http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm
    Also please try the approval workflow given in the developer's guide which covers most of the basics.
    http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#CIHFBEFB

  • Create an Approval Workflow for User Creation in AD

    Hi
    Anyone, tell me how to create an approval workflow to create users into AD. For example, before provisioning user into AD resouce the request should go to the Manager of the user for approval.
    P.S: I am using OIM 9.1
    Thanks
    Sireesha

    Hi Sireesha
    You want to create a new Process definition, selecting "Approval" as the process type.
    Then associate it with the AD User Resource Object. Add a "Manager Approval" process task and use a Task Assignment Adapter to to assign the task to the manager of the request target.
    In order for the Approval Process to fire, you need to ensure that you provision the AD User Resource Object via a Request, rather than directly.
    HTH
    Cheers
    Rob

  • Customer Creation Approval Workflow

    Hi Folks - Does R12 has a Customer creation approval workflow ? If not ,Can we create a custom workflow and hook it to Customer screen?
    Any Ideas?
    Thanks.

    SanDan wrote:
    Hi Folks - Does R12 has a Customer creation approval workflow ? Please see (How Can We Have Customer Creation Approval Workflow [ID 883262.1]).
    If not ,Can we create a custom workflow and hook it to Customer screen?
    Any Ideas?Yes you can create a custom workflow.
    Thanks,
    Hussein

  • OIM 11g Approval Workflow - Error

    Hi All,
    I have created a approval workflow (Operational) in OIM11g. Have deployed it as a soa-composite and registered with OIM. Till here everything went fine.
    I have created an apporval policy, to assign to requests of a specific type of resource .
    When the resource is requested, the approval workflows is gettign triggered,but the request goes to failed state.
    I am getting any exceptions in the logs / on the console.
    Has anyone encountered this kind of issue.
    Vicky

    vicky wrote:
    Hi All,
    I have created a approval workflow (Operational) in OIM11g. Have deployed it as a soa-composite and registered with OIM. Till here everything went fine.
    I have created an apporval policy, to assign to requests of a specific type of resource .
    When the resource is requested, the approval workflows is gettign triggered,but the request goes to failed state.
    I am getting any exceptions in the logs / on the console.
    Has anyone encountered this kind of issue.
    VickyCheck your SOA server through the em and that should show you your request and the fault states and everything .. that should give you an idea on what is going wrong ...

Maybe you are looking for

  • How to pass the values from the Wb Dynpro Application to the SAP Backend ?

    Hi All, Good morning.., I have scenario like: I want to pass the values from the web dynpro appication to the SAP Back end R/3 Table. IN backend the RFC is writtn to accept the structure input from the Webdynpro. Upto know I imported the correspondin

  • Cental & Dicentral Services Registry in PI 7.1

    Hi ALL, Can anyone suggest the benefits of going for Central & Decentralized Services Registry for Dev,QA & Prod. PI 7.1 system tell me which is used in commonly ?.. thanks RK..

  • Package Failing after update to SQL Server 2012 SP2

    I have a package that was running fine with SQL Server 2012 until an upgrade to SP2 the package now fails in a derived column step where a bunch of type casts are done (DT_NTEXT)"\" " + (DT_NTEXT)@[User::phantomScriptLoc] + (DT_NTEXT)"getautomatedtab

  • BPM - Java Documentation

    Dear all, I have to implements custom components based on Orace BPM. Currently I have made a POC using BPM JAVA API but it's complicated to find a good documentation. Does anybody knows where I can find this documentation? Thanks

  • Problem with Page totals

    Hi, I have a problem while displaying page totals using <?show-page-total:dt?>. It doesnot display any values. The requirement is to display the page total before a page break and a page can have a max of 20 lines. So, after 20 lines, there should be