When the enrole.workflow.selfapproval is set to true, requesters can
approve their own requests.
The configuration property enrole.workflow.selfapproval was added to the
ITM_HOME/data/enrole.properties file. If this property is
set to true, the workflow routes an approval request to the requester. The
requester must be listed as an approver or as a member of an approval group. The default value is
false.
This property works with two other properties.
enrole.workflow.skipapprovalforrequesterenrole.workflow.disablerequesterapproval
The following tables illustrate how the properties interact. Because IBM Verify Identity Governance evaluates
enrole.workflow.disablerequesterapproval only when both
enrole.workflow.skipapprovalforrequester and
enrole.workflow.selfapproval are false, only five combinations exist.
Table 1. Default settings
| Property |
Value |
Results |
| enrole.workflow.selfapproval |
False |
When the requester is the sole approver, the request is automatically approved.
When there are other approvers, the request is routed to the other approvers, and the requester is
skipped. If the requester has a delegate, the delegate is not skipped. The request is routed to the
delegate and other approvers. |
| enrole.workflow.skipapprovalforrequester |
False |
| enrole.workflow.disablerequesterapproval |
False |
Table 2. Variation 1
| Property |
Value |
Results |
| enrole.workflow.selfapproval |
False |
When the requester is the sole approver, the request is automatically approved.
When there are other approvers, the request is routed to other approvers and the requester is
skipped. When the requester has a delegate, the delegate is skipped. If there are other approvers,
the request is routed to other approvers. If the delegate is the sole approver, the delegate is
skipped, which results in an “Unresolved Participant” condition. The request is escalated. |
| enrole.workflow.skipapprovalforrequester |
False |
| enrole.workflow.disablerequesterapproval |
True |
Table 3. Variation 2
| Property |
Value |
Results |
| enrole.workflow.selfapproval |
True |
When the requester is the sole approver, the request is routed to the requester
for approval. If there is more than one approver, the request is routed to each approver separately.
If the requester has a delegate, the request is routed to the delegate instead of the requester and
to other approvers. |
| enrole.workflow.skipapprovalforrequester |
False |
Table 4. Variation 3
| Property |
Value |
Results |
| enrole.workflow.selfapproval |
False |
When the requester is the sole approver, the request is automatically approved.
When there are other approvers, they are skipped and the request is automatically approved. If the
requester has a delegate, the delegate is not skipped. The request is routed to the delegate and
other approvers. |
| enrole.workflow.skipapprovalforrequester |
True |
Table 5. Variation 4
| Property |
Value |
Results |
| enrole.workflow.selfapproval |
True |
When the requester is the sole approver, the request is routed to the requester.
When there are other approvers, they are skipped. If the requester has a delegate, the request is
routed to the delegate. |
| enrole.workflow.skipapprovalforrequester |
True |