-
Notifications
You must be signed in to change notification settings - Fork 36
Request Actor
The Request Actor configuration of a WAL activity defines the user under whose context all the child requests (create/update/delete actions) are submitted. The possible values are:
- Service Account
- Requestor
- Resolve From Expression
- Search by Account Name
Service Account (FIMService) is the default actor.
When Request Actor is selected as Resolve From Expression, the Actor Expression must be supplied. The actor expression can be any valid WAL lookup or function expression that will resolve to the desired actor.
When Request Actor is selected as Search by Account Name, the Actor Account Name must be supplied. The actor account name is the value of the accountName attribute of the actor resource. For disambiguation, if the domain of the actor must be specified, then the format expected is domain\accountName.
The Request Actor configuration is typically used in conjunction with Apply Authorization Policy setting to implement an appropriate authorisation workflow that would otherwise be not possible to implement if the requests are due to system generated events e.g. set transitions or updates due to sync engine.
The following Update Resources activity submits an automated request to extend end-date for contractors by 6 months (which then triggers an authorization policy for seeking approval from manager):
Activity Display Name | Extend Contractor End-date | |
Request Actor | Search by Account Name | |
Actor Account Name | fim.automation.agent | |
Apply Authorization Policy | True | |
Value Expression | Target | Allow Null |
DateTimeAdd(DateTimeNow(), "180.00:00:00.0") | [//Target/EmployeeEndDate] |
- MIMWAL Site - http://aka.ms/MIMWAL
- MIMWAL Releases - http://aka.ms/MIMWAL/Releases
- MIMWAL Documentation Wiki - http://aka.ms/MIMWAL/Wiki
- MIMWAL FAQ - http://aka.ms/mimwal/faq
- MIMWAL GitHub Code Repo - http://aka.ms/MIMWAL/Repo
- MIMWAL TechNet Q&A Forum (now read-only) - http://aka.ms/MIMWAL/Forum