CA Identity Manager Implementation Guide - CA Technologies

Provisioning Roles for Additional AccountsWorkflow processes are triggered by CA Identity Manager events which are partof an admin task. For example, the Create User task includes events calledCreateUserEvent and AddToGroupEvent. When an event occurs, the workflowengine can:■■■Require approvals--An approver must approve an event, such as modifying auser profile, before CA Identity Manager updates a user store. Approvers areadministrators who have the Approver role for a particular task.Send notifications--The workflow engine can notify users of an event’s statusat different stages of a process, such as when a user initiates an event orwhen an event is approved.Generate work lists--Work lists specify the tasks that a particular user mustperform. The workflow engine updates administrators’ work listsautomatically.For common events, you can use the workflow processes supplied with CAIdentity Manager. Alternatively, you can create custom workflow processes.Provisioning Roles for Additional AccountsIn CA Identity Manager, you provide additional accounts to users by usingprovisioning roles. Provisioning roles contain account templates, which defineaccounts that exist in managed endpoints, such as an email server. Once youhave users in CA Identity Manager, you can assign provisioning roles to some ofthose users. The user receives the accounts defined by the templates in the role.14 Implementation Guide