Skip to content

Request Actor

Nilesh Ghodekar edited this page Oct 28, 2016 · 2 revisions

Overview

The Request Actor configuration of a WAL activity defines the user under whose context all the child requests (create/update/delete actions) are submitted. The possible values are:

  • Service Account
  • Requestor
  • Resolve From Expression
  • Search by Account Name

Service Account (FIMService) is the default actor.

Request Actor - Service Account

When Request Actor is selected as Resolve From Expression, the Actor Expression must be supplied. The actor expression can be any valid WAL lookup or function expression that will resolve to the desired actor.

Request Actor - Resolve From Expression

When Request Actor is selected as Search by Account Name, the Actor Account Name must be supplied. The actor account name is the value of the accountName attribute of the actor resource. For disambiguation, if the domain of the actor must be specified, then the format expected is domain\accountName.

Request Actor - Search by Account Name

Supported Activities

Implementation Guidance

The Request Actor configuration is typically used in conjunction with Apply Authorization Policy setting to implement an appropriate authorisation workflow that would otherwise be not possible to implement if the requests are due to system generated events e.g. set transitions or updates due to sync engine.

Examples

The following Update Resources activity submits an automated request to extend end-date for contractors by 6 months (which then triggers an authorization policy for seeking approval from manager):

Activity Display Name Extend Contractor End-date
Request Actor Search by Account Name
Actor Account Name fim.automation.agent
Apply Authorization Policy True
Value Expression Target Allow Null
DateTimeAdd(DateTimeNow(), "180.00:00:00.0") [//Target/EmployeeEndDate]
Clone this wiki locally