Notifications About Changes to PAM Containers

The approval business process that governs changes to PAM containers can call another business process to define how notifications about changes and approvals are handled.

By default, IdentityIQ uses the out-of-the-box PAM Identity Provisioning Notify business process to handle notifications. This notification business process is called by the approval business process; there is no UI option (apart from the business process UI itself) for choosing a business process for handling notifications.

The business process that handles notifications about changes to PAM containers includes a string that specifies who should be notified when a change request has been completed.

The value of this string can be null, or it can be a comma-separated list of one or more of the following options:

• None or null – disable notifications, meaning no notifications are sent

• User – the Identity that is being updated will be notified

• Manager – the manager of the Identity that is being updated will be notified

• Requester – the person that has requested the update will be notified

• Owner – the owner of the container will be notified

PAM Notification Templates

The PAM module provides several out-of-the-box notification templates to use for PAM notifications. The PAM Identity Provisioning Notify business process specifies which of these notification templates to use for which type of user (manager, requester, etc.). The templates can be viewed and edited in the Debug pages by choosing EmailTemplate in the object browser. To more easily locate the PAM notification templates, filter the template list using the term "PAM."