In the organization detail page, click Permitted Resources. Organization Management Authorization

13-16 Oracle Fusion Middleware Users Guide for Oracle Identity Manager 14 Creating and Searching Requests 14-1 14 Creating and Searching Requests A User in Oracle Identity Manager can manage Requests by creating, searching, or performing other operations on requests from Oracle Identity Manager Advanced Administration if the user belongs to REQUEST ADMINISTRATORS group. This chapter describes the request management feature in the following sections: ■ Creating Requests by Using Oracle Identity Manager Advanced Administration ■ Searching and Tracking Requests

14.1 Creating Requests by Using Oracle Identity Manager Advanced Administration

You can log in to Oracle Identity Manager Advanced Administration and create requests for yourself and for others if your role has the appropriate privileges. You can also create requests by using Oracle Identity Manager Self Service. Creating requests is described with the help of the following scenarios: ■ Creating a Request To Create a User ■ Creating a Request to Provision a Resource to Users ■ Creating a Request to Deprovision Resources

14.1.1 Creating a Request To Create a User

To create a request to create a user:

1. In Oracle Identity Manager Advanced Administration, click the Administration

tab, and then click Requests. 2. From the Actions menu on the left pane, select Create Request. Alternatively, you can also click the Create Request icon on the toolbar. The Select Request Template page of the Create Request wizard is displayed. See Also: Managing Requests on page 10-1 for information about request management concepts and tasks Note: The steps in the Create Request wizard are dynamically generated based on the selection of the request template in the first step. 14-2 Oracle Fusion Middleware Users Guide for Oracle Identity Manager 3. From the Request Template list, select the request template based on which you want to create the request. The dropdown list shows all the default request templates as well as the custom templates that are created based on the request types. In this example, select Create Contractor, and then click Next. 4. In the Enter Details page, specify values for the user attributes. The fields for the user attributes are displayed as defined in the Create Contractor request template. For example, the Middle Name attribute is not displayed if you have already specified a value for it at the template level. For the Organization attribute, an LOV is available, whose values are also defined at the template level. For details about specifying these values, see Creating a Request Template Based on the Create User Request Type on page 17-3. After specifying values for the user attributes, click Next. 5. In the Enter Additional Data page, enter the value of the attribute that is specified as additional data in the request template that you are using to create this request. In this example, Date of Birth is specified as an additional attribute in the request template. Enter a value in the Date of Birth field, and then click Next. 6. In the Confirm page, specify values for the Effective Date and Justifications fields. Effective date is the date from which the request will be active after approval. For example, after a create user request is approved, the user is created in Oracle Identity Manager on the date specified in the Effective Date field. The Justification field is a justification for creating the request that might help the approver in approving or rejecting the request. On clicking Finish, a request to create a user based on the Create Contractor request template is created. Note: ■ The Create Contractor request template is not a default request template and is available for selection when a request template with the same name is created based on the privileges you have. For the purpose of this scenario, this request template has been created based on the Create User request type for creating user accounts for contract employees. For information about creating this request template, see Creating a Request Template Based on the Create User Request Type on page 17-3. ■ The Create Role, Modify Role, and Delete Role request templates are not available in the Request Templates list. This is because request creation by using any request template that are based on the Create Role, Modify Role, and Delete Role request types are supported from the APIs, but not in the UI. However, you can search for these request templates in the Request Templates tab. In addition, the Create Role, Modify Role, and Delete Role request types can be used to create approval policies and new request templates. Note: The Enter Additional Data page is displayed dynamically based on the additional data specified in the request template. Creating and Searching Requests 14-3

14.1.2 Creating a Request to Provision a Resource to Users

To create a request to provision a resource to one or more users:

1. In Oracle Identity Manager Advanced Administration, click the Administration

tab, and then click the Requests tab. 2. From the Actions menu on the left pane, select Create Request. The Select Request Template page of the Create Request wizard is displayed. The steps in this wizard are dynamically generated based on the selection of the request template in the first step.

3. From the Request Template list, select the request type or request template based

on which you want to create the request. In this example, select Provision E-Business Resource , and then click Next. 4. In the Select Users page, specify a search criteria in the fields to search for the users that you want to provision the resource, and then click Search. A list of users that match the search criteria you specified is displayed in the Available Users list. 5. From the Available Users list, select one or more users to whom you want to provision the resource. You can select one or more users that are your direct reports. In other words, you can select one or more users for whom you are the manager as specified in the users profiles. Click Move to include your selection in the Selected Users list, and then click Next. 6. In the Select Resources page, search for the available resources. From the Available Resources list, select the resources that you want to provision, click Move to include the selected resources in the Selected Resources list. In this example, select E-Business RO as the resource to be provisioned, and then click Next. Note: The following request types are similar in nature in terms of request creation and execution: ■ Provision Resource ■ Modify Provisioned Resource Note: The Provision E-Business Resource request template is not a default request template and is available for selection when a request template with the same name is created based on the privileges you have. For the purpose of this scenario, this request template has been created based on the Provision Resource request type for provisioning an E-Business resource to a user. For information about creating this request template, see Creating a Request Template Based on the Provisioning Resource Request Type on page 17-10 Note: In this page, available users list is shown based on the authorization policies for user entities. The users cannot be restricted from the request templates. 14-4 Oracle Fusion Middleware Users Guide for Oracle Identity Manager 7. In the Resource Details page, specify values for the attributes of the resource. In this example, you can select the life span of the E-Business resource being provisioned to the selected user or users. In the Life Span Type lookup, select a life span type, such as Short term, Mid term, or Long term. In the Server lookup, select the name of the E-Business server to connect to. For the Oracle Apps User Responsibilities parent attribute, you can enter multiple sets of values for the Responsibility Start Date, Responsibility End Date, and Responsibility Name child attributes. To do so, select values in the fields, and then click Add. Repeat entering another set of values in the Responsibility Start Date, Responsibility End Date, and Responsibility Name fields, and then click Add. For information about defining parent and child attributes, see Creating a Request Template Based on the Provisioning Resource Request Type on page 17-10. Specify values for all other resource attributes, and then click Next. If you select multiple resources in the Select Resources page, then the Resource Details page for each selected resource is displayed one by one. For instance, in the Select Resources page, you select the E-Business and Active Directory resources. The Resource Details page for the E-Business resource is displayed. Enter values for all attributes of the E-Business resource, and click Next. Then, the Resource Details page for the Active Directory resource is displayed. Specify values for all attributes of the Active Directory resource, and click Next. 8. If the selected resource has dependent resources, then the steps to select the dependent resources are displayed. Select the dependent resources, click Next. A resource object can have a dependency on other resource objects. During creation of provision resource request for self or others, if the dependent resources are not already provisioned, then these dependent resources are automatically added to the request. This is applicable to the Provision Resource and Self Provision Resource request types. Dependent resources can of the following types: ■ Single beneficiary: During creation of a provision resource request for single user, if the dependent resources are not already provisioned, then those dependent resources are automatically added to the request. Suppose the resource objects DB, AD, and Exchange are created in such a way that Exchange has dependency on AD, and AD has dependency on DB. Single beneficiary dependent resources is described with the help of the following examples: Note: Only the E-Business RO resource is displayed in the Selected Resources list because the Provision E-Business Resource request template is created only for provisioning the E-Business resource. The resources are displayed in the Available Resources list based on the resource selection in the request template. Note: In this page, the attributes are picked up from the request dataset. See Step 1: Creating a Request Dataset for the Resources in the Oracle Fusion Middleware Developers Guide for Oracle Identity Manager for information about request datasets.