Define Home Page Quicklinks

Quicklinks are objects in IdentityIQ that enable you to place customized links on the IdentityIQ Home page and in the Quicklinks menu available on every page. Quicklinks are defined when IdentityIQ is deployed and are based on the needs of your enterprise. You can determine the behavior and availability of these links for different users. For example, IdentityIQ can be set up to limit access based on the user capabilities, rights, or workgroup membership.

Three objects control links. QuickLink objects define the links, the DynamicScope object controls who can view those links, and the QuickLinkOption object references the first two to create the Quicklinks within the product.

The QuickLinkOption object is created when a quicklink population, or DynamicScope object, is created on the Quicklink Populations page and associated with one or more QuickLink objects. The QuickLinkObjects objects do not control quicklink populations, nor the targets of the QuickLink objects, they are containers holding references to both. 

<QuickLinkOptions allowSelf="true" created="1443970828183" id="2c90900950335ce70150335e4797010e">

  <DynamicScopeRef>

    <Reference class="sailpoint.object.DynamicScope" 		id="2c90900950335ce70150335e4783010c" name="Everyone"/>
  </DynamicScopeRef>
  <QuickLinkRef>
    <Reference class="sailpoint.object.QuickLink" id="2c90900950335ce70150335e478a010d" name="Access Reviews"/>
  </QuickLinkRef>
</QuickLinkOptions>

The DynamicScope object define groups of users, quicklink populations, based on capability, rights, indirect capabilities and rights granted by a workgroup, population, or any attribute of the identity. These objects are defined on the Quicklinks Populations page. Refer to the system administration documentation for more information.

DynamicScope objects are referenced by name or ID in a QuickLinkOption object. If the quicklink population applies to an identity, the Quicklink is visible to that identity. Only System Administrators can view Quicklinks with no scopes.

DynamicScope objects are used to define the population of people who can view and run the Quicklink. DynamicScope objects are not the group of identities or objects that the Quicklink interacts with after the link is clicked.

The product ships with a DynamicScope that represents the allowAll option. The name of the DynamicScope is named Everyone. You can associate this option with any Quicklinks you want to enable the entire user population to view or use. The following QuickLinkOptions reference this DynamicScope by default:

  • Access Reviews

  • Approvals

  • Signoffs

  • Work Items

  • Policy Violations

<DynamicScope allowAll="true" created="1443970828163" id="2c90900950335ce70150335e4783010c" name="Everyone"/>

The following XML example of a DynamicScope restricts visibility to a specified Quicklink. Visibility is enabled for users in the IT department or who have the Help Desk Personnel capability. Visibility is also enabled for identities in the Inclusion list. Because Barbara.Wilson is in the Inclusions list, she can always see the Quicklink regardless of her capabilities or department.

Copy 
<DynamicScope created="1443973952475" id="2c90900950335ed60150338df3db000a" name="MyDynamicScope">
  <Description></Description>
  <Inclusions>
    <Reference class="iiq.object.Identity" id="2c90900950336e720150336f0797010d" name="Barbara.Wilson"/>
  </Inclusions>
  <PopulationRequestAuthority allowAll="true"/>
  <Selector>
    <IdentitySelector>
      <MatchExpression>
        <MatchTerm name="capabilities" value="Help Desk Personel"/>
        <MatchTerm name="Department" value="IT"/>
      </MatchExpression>
    </IdentitySelector>
  </Selector>
</DynamicScope>


By default, IdentityIQ assumes that any link defined as a top-level QuickLink object is for a non-Lifecycle Manager action which does not operate on a target identity, so no user selection options are presented.