Dynamic Permissions (Powershell target system)
complete
R
Rick van den Dijssel
We would like to have support for Dynamic permissions in HelloID. This means that we can create multiple entitlements based on contract data which is updated on contract data update.
- Support dynamic permission type in the permission list
- Grant, Update and Revoke action of dynamic permissions in Powershell
- Ability to return multiple entitlements + audit logs
- Current entitlements should be inputted to the update & revoke action
- Show dynamic permissions (entitlement) in overview with sub entitlements
- Show dynamic permission in the person overview with sub entitlements
This feature also updates the following in HelloID:
- Show which accounts are updated in the evaluation
- Ability to set a threshold on account updates
- Show some detailed information on the summary report of blocked entitlements
- Ability to set multiple audit logs for a single grant of account, account access, permission and to customize the message. This is backward compatible so current audit log messages will still work.
R
Rick van den Dijssel
complete
R
Rick van den Dijssel
R
Rick van den Dijssel
R
Rick van den Dijssel
Merged in a post:
Add Entitlement Name to Blocked Summary
Ramon Schouten
As an HelloID Administrator I would like to see which type of entitlement (Account, Account Access or a Group Membership) is being blocked.
When multiple blocked entitlements occur for the same system we currently have no way of identifying which is the Account and which is the Account Access entitlement.
I would like to be able to be sure before enforcing them.
R
Rick van den Dijssel
Merged in a post:
Remove 'baked-in' logging fragments
K
Kevin Lisowski
When returning an $auditMessage from a provisioning action, the message is bookended with 'Account' & 'created' (or other status message).
This makes it challenging to work up a descriptive message for possible events that don't fit the wording.
R
Rick van den Dijssel
Merged in a post:
Detail information about blocked entitlements
K
KaHo Man
As an administrator i would like to see details of a blocked entitlement if a threshold is exceeded. This gives me as an administrator more insight about the actions HelloID wants to perform and as an administrator I can manually approve the processing. Without additional information about which persons and account this will have impact on, I dare not to press the manually approve button.
R
Rick van den Dijssel
in progress
R
Rick van den Dijssel
planned
R
Rick van den Dijssel
under review
R
Rick van den Dijssel
Ramon Schouten the blocked entitlements are visible on entitlement overview. You can see them easily with the Grant or Revoke blocked filter.
Ramon Schouten
Rick van den Dijssel: to clarify; I mean the type of entitlement.
I would like to know whether I am enforcing either the account itself, the access to the account or just a permission for the account.
As seen in the screenshot it is possible to indeed filter on this, but it would be handy to immediately see the type of entitlement.
Load More
→