Mover Configuration

The Mover process defines the operations that are launched when an identity moves within your organization.

Move the slider to enable Mover Processing, then configure global behavior for mover processing.

Note: see Sample Rules for Rapid Setup for information about sample rules included with Rapid Setup.

Option

Description

Generate Approvals

Enable this option if the mover process should include approvals. The approval path is defined in the Mover Business Process you specify below.

Note that the default RapidSetup – Mover business process delegates approvals to the LCM Provisioning business process.

Exclude Uncorrelated Identities

Exclude uncorrelated identities from mover processing. A correlated identity is an identity that has an account on an authoritative application.

Launch a Targeted Certification

Launch a targeted certification campaign as part of mover processing. By default, the approver for this certification is the identity's manager; in cases where the move results in a change of manager for the identity, the new manager is the approver. You can add the identity's current (that is, pre-move) manager to the approval process by enabling the Include Previous Manager as a Certifier option, below.

If you are enabling joiner processing as part of the mover process, this certification campaign must reach completion before joiner processing will begin.

Stage the Certification

Staging is an optional phase you can use to test or validate a certification before sending it to reviewers.

See Phases of a Certification for more information.

Include Birthright Roles

Include any birthright roles that were previously assigned to this user in the certification.

Certification Owner

The identity or group responsible for the certification campaign.

Backup Certifier

The identity or workgroup that will be responsible for access reviews, if the primary certifier is unable to certify or cannot be identified.

Include Previous Manager as a Certifier

If the move includes a change of manager, add the identity's previous manager as an additional approver in the certification process.

Joiner Processing

Run the joiner process as part of mover processing, in order to perform basic access assignment such as the addition or removal of birthright roles and, if enabled at the application level, performing account-only provisioning if no account exists for the identity.

Post Mover Rule

Rules can drive custom actions outside of the standard mover processes. If you want to run a rule as the final step of the mover process, choose the rule here. Rules of type PostLifecycle are available to select for this option.

Threshold Type

Identity Processing Thresholds stop lifecycle events before they are fully processed, in case of accidentally-triggered workflows, To enable an Identity Processing Threshold, choose from Fixed or Percentage.

For more information, see Using Identity Processing Thresholds for Error Prevention.

Threshold

Enter a value to use in conjunction with the Threshold Type, for Identity Processing Thresholds.

Mover Business Process

Choose the business process for mover processing.

Trigger Filter

Trigger filters define what is considered a "mover" in your organization.

For example, if a change to an identity's manager should trigger mover processing, you can set a Trigger Filter using the "Manager" attribute with the operator "Changed" to select identities.

You can use attributes, populations, or a combination of both to define your moving identities. You can use "And" and "Or" conditions for filtering, and the gear icon to the right of your criteria lets you move, duplicate, or delete rows.

For more information, see Defining Trigger Filters.