Provisioning

Allow an export option within Business rules editor. Where the rules are being built and the list of users isshown on the right side of the screen. Could this be exported for external validation in other systems? Many thanks in advance.

This feedback item is created based on an issue in the GitHub repository "HelloID-Conn-Prov-Target-Microsoft-Entra-ID-Exchange-Online". Issue: https://github.com/Tools4everBV/HelloID-Conn-Prov-Target-Microsoft-Entra-ID-Exchange-Online/issues/28 ================================================================ Currently when connecting to Connect-ManagedExchangeonline it does not retrieve the functions required to grant full/send as permissions to shared mailboxes, or add users to a distribution group. As this system currently supports connecting to exchange online using the cloud agent adding the capability to grant permissions to exchange items seems like the way to go. Currently the Connect-ManagedExchangeOnline feature is used only for hiding addresses from the global adres list, which is a very niche feature/requirement Add the following functions to the function retrieval of Connect-ManagedExchangeOnline to enable all aspects of configuring a mailbox and granting/revoking permissions: Get-MailboxCalendarConfiguration Get-MailboxMessageConfiguration Get-MailboxRegionalConfiguration Get-MailboxSpellingConfiguration Get-MailboxFolder Get-MailboxFolderPermission Get-MailboxPermission Get-MailboxUserConfiguration Get-RecipientPermission Get-DistributionGroup Get-Recipient Get-UnifiedGroup Get-UnifiedGroupLinks New-DistributionGroup New-UnifiedGroup Set-MailboxCalendarConfiguration Set-MailboxMessageConfiguration Set-MailboxRegionalConfiguration Set-MailboxSpellingConfiguration Set-MailboxFolderPermission Set-DistributionGroup Set-UnifiedGroup Add-MailboxFolderPermission Add-MailboxPermission Add-RecipientPermission Add-DistributionGroupMember Add-UnifiedGroupLinks Remove-MailboxFolderPermission Remove-MailboxPermission Remove-MailboxUserConfiguration Remove-RecipientPermission Remove-DistributionGroup Remove-DistributionGroupMember Remove-UnifiedGroup Remove-UnifiedGroupLinks ================================================================ Additional information: The list below is used in the "HelloID-Conn-Prov-Target-ExchangeOnline" repository and contains the functions required to execute commands that are currently not supported by the Cloud Agent. https://github.com/Tools4everBV/HelloID-Conn-Prov-Target-ExchangeOnline Add-MailboxPermission Remove-MailboxPermission Add-RecipientPermission Remove-RecipientPermission Get-EXORecipient Get-Recipient Get-DistributionGroup Add-DistributionGroupMember Remove-DistributionGroupMember Set-MailboxFolderPermission Get-MailboxFolderStatistics Set-MailboxRegionalConfiguration Set-MailboxAutoReplyConfiguration Get-MailboxAutoReplyConfiguration New-DistributionGroup Set-DistributionGroup Get-User

When reviewing suggested rules in the Rule Mining report, it is possible to filter the Entitlements list (for example on Redundant and/or Covered by configured rules) before clicking Create Rule. Currently, these filters are reset every time the user navigates to the next or previous suggested rule. As a result, the user has to reapply the same filters for every rule, and previously hidden entitlements become visible again. Expected behavior The selected entitlement filters should remain active while navigating between suggested rules until the user explicitly changes or clears the filters, or creates the rule. Why is this valuable? Keeping the filters applied makes reviewing consecutive suggested rules much more efficient and prevents users from repeatedly having to configure the same filters.

Currently, Rule Mining analyzes all imported entitlements that are present in a target system. In practice, some entitlements should not be considered when creating Business Rules. Permissions may, for example, be outdated, intended for manual assignment, or otherwise irrelevant to business rules. Rule Mining can still identify patterns for these entitlements, causing them to appear in the Rule Mining report and adding unnecessary results to the analysis. We would like to introduce an exclusion list for entitlements in Rule Mining. Administrators should be able to select specific entitlements from a target system and exclude them from Rule Mining. Entitlements on this exclusion list should not be analyzed and should not appear as results in Rule Mining reports. This would: Reduce irrelevant results in Rule Mining reports. Allow administrators to focus the analysis on entitlements that are actually candidates for Business Rules. Prevent outdated or otherwise irrelevant entitlements from influencing the Rule Mining analysis. Make Rule Mining reports easier and faster to review.

Starting with release 2026.08, Context.InConditions is set to $true by default when Preview is used in PowerShell. We would like to see the same behavior for inCondition within complex field mappings in JavaScript. Currently, inCondition is set to false when using the Preview button for a complex field mapping. As a result, mappings that depend on inCondition do not show the expected preview value.

I would like to add the role mining functionality within a Business Rule, so it provides suggestions to add entitlements based on the person selection. This should be a smart overview, allowing easy setup or changes of business rules based on current entitlements and (for instance) percentages of those entitlements already assigned/not assigned.

we would like to have a version history of all parts of HelloID provisioning that is restorable, like we had in IAM.

I would like the option to be able to choose to just unmanage entitlements when a person is removed in HelloID. Currently, the entitlements are always revoked. However, there are cases in which we do not want that. I.M.O. we shouldn't act on the account data at all the moment we no longer have the data from a person. No data = no actions. But as both situations are desired perhaps we could make this configurable per system

Possibility to save the filter on the reconciliation report, so it's possible to re-use when a new report is created.

As a HelloID administrator, I would like to send notifications on multiple pre-offboarding events. For example, I would like to send a notification 14 days before the employment ends, and also seven days before the employment ends.