Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
The Request Actor configuration of a WAL activity defines the user under whose context all the child requests (create/update/delete actions) are submitted. The possible values are:
- Service Account
- Resolve From Expression
- Search by Account Name
Service Account (FIMService) is the default actor.
When Request Actor is selected as Resolve From Expression, the Actor Expression must be supplied. The actor expression can be any valid WAL lookup or function expression that will resolve to the desired actor.
When Request Actor is selected as Search by Account Name, the Actor Account Name must be supplied. The actor account name is the value of the accountName attribute of the actor resource. For disambiguation, if the domain of the actor must be specified, then the format expected is domain\accountName.
The Request Actor configuration is typically used in conjunction with Apply Authorization Policy setting to implement an appropriate authorisation workflow that would otherwise be not possible to implement if the requests are due to system generated events e.g. set transitions or updates due to sync engine.
The following Update Resources activity submits an automated request to extend end-date for contractors by 6 months (which then triggers an authorization policy for seeking approval from manager):
|Activity Display Name||Extend Contractor End-date|
|Request Actor||Search by Account Name|
|Actor Account Name||fim.automation.agent|
|Apply Authorization Policy||True|
|Value Expression||Target||Allow Null|