Topic
2 replies Latest Post - ‏2013-02-26T05:47:39Z by SystemAdmin
HuzefaHajee
HuzefaHajee
1 Post
ACCEPTED ANSWER

Pinned topic How to add "Access" as an Entitlement of provisioning policy (ITIM5.1)

‏2012-09-06T14:39:24Z |
How can you add an "Access" (target application group defined as Access) as an entitlement for a provisioning policy in ITIM 5.1?
E.g.
Target = LDAP
Service Name = LDAPService
Target Group in LDAP = XYZ
Target Group named/defined as Access = "XYZAccess"
Provisioning Policy = LDAP_Policy

A group of users require an account in LDAP and membership to "XYZ" group in LDAP.

Now I know I can simply use "Group" attribute as a parameter and statically add membership to "XYZ" group.
but question is, how can I leverage the "Access" facility to provide entitlement so that I can add the entitlements without going all the way to the parameters and defining it statically.

Any thoughts/ideas are welcome.

Regards,
Updated on 2013-02-26T05:47:39Z at 2013-02-26T05:47:39Z by SystemAdmin
  • yn2000
    yn2000
    1026 Posts
    ACCEPTED ANSWER

    Re: How to add "Access" as an Entitlement of provisioning policy (ITIM5.1)

    ‏2012-09-07T14:09:01Z  in response to HuzefaHajee
    I am not sure I understand what you want here.
    Entitlement is a policy. It sounds like you want to change the policy based on the access that the user is asking.
    To exaggerate, Mr. Customer, could you please change your security policy so that I can access to XYZ application?
    Rgds. YN.
  • SystemAdmin
    SystemAdmin
    9855 Posts
    ACCEPTED ANSWER

    Re: How to add "Access" as an Entitlement of provisioning policy (ITIM5.1)

    ‏2013-02-26T05:47:39Z  in response to HuzefaHajee
    Its is nice to add group accesses as entitlement targets in a policy. Is it possible to do this?