When a certified identity is member of a specific role, a certification task should be sent to each of the identities’ roles RoleOwners, instead of the identities’ manager.
We have tried to solve this using the CertificationPreDelegation rule, but as it turn out, the rule only supports delegation to a single identity.
My assumption would be, that the certification should be split up when it’s created. The question is: How can I do that? Any suggestions how this may be implemented?
When you iterate through the certification items and get owners of each role, call below method to bulk assign all relevant items to roles owners
certification.bulkReassign(requesterIdentity, {List of Certification Item Objects}, {RoleOwnerIdentity},{Access Review Name},{Comments},“”,context.getConfiguration());
After predelegation of all items, items assigned to single owner will be merged into a single Access Review automatically and you will only find 1 access review for every role owner.
Hi Sarat,
Thanks for the quick response, that sounds like it could solve my issue!
The Problem I am now facing is how to get the List of CertificationItems? Calling “entity.getItem(certification.getId())” returns null in all cases.
Hello @tom_hanse
We have “entity” as an argument to pre-delegation rule and below line can fetch you items.
List items= entity.getItems();
Please iterate through the items and perform bulk assignment.
Note: “entity” is Identity object and “item” is either roles or entitlements