Feature #984
Updated by Vladimír Kotýnek about 6 years ago
I have a situation on a project where a role approver/manager or virtual system administrator is temporary unavailable (e. g. is on vacation, due to illness/injury is unable to work, etc.). In this case I as an IdM administrator I want to provide him/her a way to delegate his/her his agenda to another person who has identity in IdM and I don't want to do it myself manually or by some data-based hacks or workflow changes. Currently the whole delegation agenda is managed by another IT system that covers a work attendance management and can be synchronized to IdM - both pushed via IdM's API or pulled by IdM during resource synchronization. The user can configure different delegations for each of his/her contracts to different persons, IdM should allow it. There should also be a way to configure delegations in IdM manually, e. g. as a feature of identity's contract. The requested feature should work like this (the main use-case) - the feature description matches also request for automatically synchronized delegations: # User logs in IdM and goes to Delegation's config # Selects an agenda (role approving, virtual system task resolving, subordinates management) # Selects date from and date to (let's discuss a possibility of permanent delegation, e. g. a head of department might want to move her/his agenda to a subordinate permanently) # Selects identity (or it's contract) to whom the agenda will be delegated. There can be selected one or more identities. # Finally confirms delegation request. # Then there starts a delegation approving worflow (at least the identity to whom the delegation is created must approve it, in some cases I can imagine that also security manager or IdM manager would want to approve a delegation)