Feature #984
closed
Delegations in IdM
100%
Description
I have a situation on a project where a role approver/manager or virtual system administrator is temporary unavailable (e. g. is on vacation, due to illness/injury is unable to work, etc.). In this case I as an IdM administrator I want to provide him/her a way to delegate his/her agenda to another person who has identity in IdM and I don't want to do it myself manually or by some data-based hacks or workflow changes. Currently the whole delegation agenda is managed by another IT system that covers a work attendance management and can be synchronized to IdM - both pushed via IdM's API or pulled by IdM during resource synchronization. The user can configure different delegations for each of his/her contracts to different persons, IdM should allow it.
There should also be a way to configure delegations in IdM manually, e. g. as a feature of identity's contract.
The requested feature should work like this (the main use-case) - the feature description matches also request for automatically synchronized delegations:
- User logs in IdM and goes to Delegation's config
- Selects an agenda (role approving, virtual system task resolving, subordinates management)
- Selects date from and date to (let's discuss a possibility of permanent delegation, e. g. a head of department might want to move her/his agenda to a subordinate permanently)
- Selects identity (or it's contract) to whom the agenda will be delegated. There can be selected one or more identities.
- Finally confirms delegation request.
- Then there starts a delegation approving worflow (at least the identity to whom the delegation is created must approve it, in some cases I can imagine that also security manager or IdM manager would want to approve a delegation)
The assignment is here: https://wiki.czechidm.com/priv/features/delegace
Related issues