Mover Configuration
The Mover process defines the operations that are launched when an identity moves within your organization.
Move the slider to enable Mover Processing, then configure global behavior for mover processing.
Note: see Sample Rules for Rapid Setup for information about sample rules included with Rapid Setup.
Option |
Description |
Generate Approvals |
Enable this option if the mover process should include approvals. The approval path is defined in the Mover Business Process you specify below. Note that the default RapidSetup – Mover business process delegates approvals to the LCM Provisioning business process. |
Exclude Uncorrelated Identities |
Exclude uncorrelated identities from mover processing. A correlated identity is an identity that has an account on an authoritative application. |
Launch a Targeted Certification |
Launch a targeted certification campaign as part of mover processing. By default, the approver for this certification is the identity's manager; in cases where the move results in a change of manager for the identity, the new manager is the approver. You can add the identity's current (that is, pre-move) manager to the approval process by enabling the Include Previous Manager as a Certifier option, below. If you are enabling joiner processing as part of the mover process, this certification campaign must reach completion before joiner processing will begin. |
Stage the Certification |
Staging is an optional phase you can use to test or validate a certification before sending it to reviewers. See Phases of a Certification for more information. |
Include Birthright Roles |
Include any birthright roles that were previously assigned to this user in the certification. |
Certification Owner |
The identity or group responsible for the certification campaign. |
Backup Certifier |
The identity or workgroup that will be responsible for access reviews, if the primary certifier is unable to certify or cannot be identified. |
Include Previous Manager as a Certifier |
If the move includes a change of manager, add the identity's previous manager as an additional approver in the certification process. |
Joiner Processing |
Run the joiner process as part of mover processing, in order to perform basic access assignment such as the addition or removal of birthright roles and, if enabled at the application level, performing account-only provisioning if no account exists for the identity. |
Post Mover Rule |
Rules can drive custom actions outside of the standard mover processes. If you want to run a rule as the final step of the mover process, choose the rule here. Rules of type |
Threshold Type |
Identity Processing Thresholds stop lifecycle events before they are fully processed, in case of accidentally-triggered workflows, To enable an Identity Processing Threshold, choose from Fixed or Percentage. For more information, see Using Identity Processing Thresholds for Error Prevention. |
Threshold |
Enter a value to use in conjunction with the Threshold Type, for Identity Processing Thresholds. |
Mover Business Process |
Choose the business process for mover processing. |
Trigger Filter |
Trigger filters define what is considered a "mover" in your organization. For example, if a change to an identity's manager should trigger mover processing, you can set a Trigger Filter using the "Manager" attribute with the operator "Changed" to select identities. You can use attributes, populations, or a combination of both to define your moving identities. You can use "And" and "Or" conditions for filtering, and the gear icon to the right of your criteria lets you move, duplicate, or delete rows. For more information, see Defining Trigger Filters. |