Previous Topic: Admin Task MembersNext Topic: Matching Attribute Resolver

Dynamic Resolver

This resolver returns a list of users according to a dynamic rule resolved at run-time. Use the following selection to set dynamic rule constraints:


Specifies the type of user to approve this task.

Note: This only shows those objects that can contain users (or approvers).

User or Object

Specifies the user or object where the approvers can be found.

User Associated with this account

Updates the User or Object Attributes field to list CA Identity Manager user attributes instead of endpoint account attributes. The resolver works off attributes at the CA Identity Manager user level. This check box applies when you select an endpoint account object, such as an Active Directory account.


Specifies the attribute that contains the approvers.

Note: The Attribute list is sorted in alphabetical order and contains a list of unique display names. Extended attributes are excluded from the list.

Event Object Type

Specifies the type of object from the event.

Note: This appears only if "Object associated with the event" is selected.

Note: Dynamic Resolver with Create Group requires existence of the object. Group membership/administrators information can be used with dynamic/match attribute resolvers for existing groups only.

The Dynamic Resolver has been enhanced to add the previous approver to the supported object list. If the physical attribute hosting manager information is selected, the configuration routes the approval to a manager.

To configure the resolver for Manager Approval Resolver: