MICROSOFT IDENTITIY MANAGER

Question

I want to create a MPR such that if any user wants to add a new user then the request is sent to admin , and after that admin can approve or raise request for adding new user?

Answer 1

Hello Ritik Raj,

It's a little bit complex to explain it by text, but here is the macro tasks:

1. Create a MPR of type request: Requestor Set "All people", Action "Create", Check grants rights, Current and Final Set "All people", Choose "All Attributes". and Validate your MPR
2. Create a Security group that contains All of you admins
3. Create a Workflow: Type "Authorization", in the list of Activity, chose "Approval". Then add your Security group in the "Approvers" field. Save it and Save your WF.
4. Create the exact same MPR as above, but DO NOT check grants rights. In the Policy Workflows, select your newly created WF in the "Authorization Workflows"

Please, note that you may want to customize the email template of your WF. If the request is rejected, the users will need to re do it completely.

Kind Regards
Sylvain