tutorial:adm:role_change_notification_configuration

A notification about the request status is sent when a role assignment change request is resolved. The default recipient is the user for whom the roles are to be changed.

 sending notifications configuration

There are two possible recipients at the moment:

  • the user for whom the change has been requested (applicant)
  • the user that's actually created the request (implementer)

In Settings→Configuration, the recipient can be changed.

By clicking on the green Add button we add the variable 'idm.sec.core.wf.notification.applicant.enabled' as a key and true/false as a value. The same applies to the variable 'idm.sec.core.wf.notification.implementer.enabled'.

  • 'idm.sec.core.wf.notification.applicant.enabled' configures sending notifications to the identity whose permissions are to be modified. If this involves the same identity who's requested the change regarding his/her own role permissions, then s/he herself/himself executes the change request. If this variable is false and the other one is set as true, the identity is still an implementer and will be notified accordingly. But if both are true, the identity will get just 1 notification.
  • 'idm.sec.core.wf.notification.implementer.enabled' configures sending notification to the identity who'd made request on behalf of another identity. Say, a manager requests a role for one of his/her employees in his/her department and wants to know the result.