Provisioning

Right now a user needs admin access to HelloID and gets full access to the Provisioning console. We would like to be able to grant someone only access to persons and/or business rules only.

Provide an overview of which entitlements (e.g. AD group memberships) have been set by Provisioning (Managed) and which not (Unmanaged) based on all current entitlements the uses has. This is key to getting an overview of entitlments and understand what Provisioning has done.

I would be nice to be able to enrich an existing source system with information providing from an other system. Example : I would like to get the user's phone number from a telephone system. Today it is possible but we need to do this logical directly into the Source System PowerShell script (so it is not possible using out of the box source connector like AD). It would be nice to have a specific functionality for that.

I'd like to see an account mapping preview on the evaluation. OFC this is not taking into account the conflicts and iteration, but even without that I want to see if all mappings at least work without error. I've been dealing with persons where 5% of the mappings fail due to "unforseen" data quality issues in HR which I didn't see when creating single mappings. It would be a shame to enforce and then having to retry or force update accounts. Examples: forgot to remove the ' char or made an error on one of the less obvious naming convention variants.

Would like to skip a business rule if another business rule is already assigned. Example Business Rule for handing out MS E1 and E3 licenses where if the E3 Business Rule has already been assigned, the E1 Business Rule is unassigned. I actually want to create two (or more) business rules where I want to be able to designate a winner if more than one are selected.

It might be an idea to add an Import/Export option for a Custom PowerShell connector. Instead of coping with all the scripts one by one. Particularly now with the extra files of Dynamic Permissions.