Thursday, November 13, 2014

OIM 11g R2 - Approval Policies deprecated request types

In this post I will cover some of the new request types that are introduced in Approval Policies which were not there in till 11g R1 (11.1.1.7.0) release.

Along with that there were some other changes like that we do not have Request Templates anymore in 11g R2.

There was also Template Level Approval Workflow setting that was available in 11g R1 which has been completely discarded in the newer release.

Since the Application Instances have been introduced all resource request types have replaced with the Application Instance request types.

11g R2 also has new set of request types for Entitlements.

Lets see the new request types in 11g R2.






















There is one more not captured in the above screenshot : Access Policy Based Application Instance Provisioning


The following request types have been deprecated and do not appear:

Provision Resource - Replaced by Provision Application Instance
De-Provision Resource - Replaced by Revoke Account
Enable Provisioned Resource - Replaced by Enable Account
Disable Provisioned Resource - Replaced by Disable Account
Modify Provisioned Resource - Replaced by Modify Account
Request types related to 'Self' like Self-Assign Resource and Self-Assign Role are replaced by generic type Provision Application Instance and Assign Roles

The complete new ones are :-

All Entitlement Specific
Application Instance specific replaced resource centric
Access Policy Based Application Instance Provisioning


Request templates are not supported from R2 onwards. The custom Request templates are not actually custom request types but are based on the standard request types with additional configuration. All the approval policy rules that are based on Request Templates need to be modified appropriately prior to upgrade. The recommendation is to model the approval task assignment rules in the SOA workflow. 'Resource' related request types are also deprecated. Corresponding approval configuration needs to be reconfigured for for "Application Instance" based request types.

Create/Modify/Delete Role request types are still supported in R2. Approval Policies can be created for these request types.

Note: Similar to R1, request creation and tracking support for these request types is only limited to backend. R2 UI doesn't support submission and tracking of Create/Modify/Delete Role requests.