0 votes

I would like the request for access approval to include a justification and an optional duration field (in case not permanent) that can assist in the approval process and also be recorded for auditing purposes. Is this possible?

by (50 points)
0

Hello Nicole,

Currently, there is no such possibility. We have the feature planned for future releases. You can upvote it in our roadmap: https://www.adaxes.com/info_roadmap.htm.

For us to help you with a workaround, specify the version of Adaxes you are currently using and the operations for which you need to implement the workflow. To check the Adaxes version:

  1. Launch Adaxes Administration Console.
  2. Right-click your service.
  3. Click Properties in the context menu.
  4. Adaxes version is displayed on the General tab.
0

The version is: 3.10.15918.0

1 Answer

0 votes
by (269k points)
selected by
Best answer

Hello Nicole,

Thank you for clarifying. For example, to specify a reason for adding a user to a group, you can use a Custom Command with parameters. One parameter in the command will be used to specify a reason and the other to specify the group the user will be added to. To create the Custom Command:

  1. Launch Adaxes Administration Console.
  2. In the Console Tree, right-click your Aadaxes service.
  3. In the context menu, navigate to New and click Custom Command.
  4. On step 2 of the Create Custom Command wizard, select User Object type and click Next.
  5. Click New.
  6. Select Edit box and click Next.
  7. Specify a parameter name (e.g. Reason).
  8. Click Next and then click Finish.
  9. Click New again.
  10. Select AD object picker and click Next.
  11. Specify a parameter name (e.g. Group) and click Next.
  12. Click Configure.
  13. In the Display only objects that match the following LDAP filter field, enter the following: (objectCategory=group)
  14. Click OK and then click Finish.
  15. Click Next.
  16. Click Add an action.
  17. Select Add the User to a group and click the Custom Action Description button.
  18. In the dialog box that opens, specify a custom action description. For example: Add user %fullname% to group. Reason: %param-Reason%

    The description will be displayed in the Operation section of the Approval Request.
    The value references in the description will be replaced with the Full Name of the user added to a group and with the text specified in the Reason parameter for the Custom Command execution.
  19. In Action Parameters, enter the following: %param-Group%
    The value reference will be replaced with the group that you select in the Group parameter for the Custom Command execution.
  20. Select Get approval for this action.
  21. Specify the approvers and click OK.
  22. Click Next and finish creating the Custom Command.

You can execute the Custom Command in Adaxes Web Interface same as any other operation (e.g. Reset Password) or create an action for it. For information on how to configure actions for Adaxes Web Interfaces, see https://www.adaxes.com/tutorials_WebInt ... nsPane.htm.

Related questions

0 votes
1 answer

Is there any way to give users the ability to see the approvers for their requests without necessarily giving them full read access to those approvers properties?

asked Sep 25, 2019 by dotkickpra (50 points)
0 votes
0 answers

Is there any way to give users the ability to see the approvers for their requests without necessarily giving them full read access to those approvers properties?

asked Oct 20, 2016 by RickWaukCo (320 points)
0 votes
1 answer

the script repo examples are almost entirely written in ADSI, however powershell is now far more widely used, is it possible to have all scripts written in both ADSI and powershell.

asked Jan 5 by i*windows (140 points)
0 votes
1 answer

Is there a way to get the name of the user who approved a request and supply that to a step inside of a custom command? For example, HR submits a status change for an employee. ... and pass it as a param in a custom command that is called in one of the steps?

asked May 12, 2021 by davfount90 (20 points)
0 votes
1 answer

I turned on the option to have "Approve" and "Deny" links sent in the approval request email. It seems to not be working through. Here is a screenshot of what it ... the link. I also tried using incognito mode in chrome. Same look. Appreciate the assistance!

asked Mar 29, 2021 by mark.it.admin (2.3k points)
3,315 questions
3,013 answers
7,701 comments
544,540 users