Managed Services (Basic Access Requests) › Creating a Service › Define Fulfillment and Revocation Actions for the Service

Define Fulfillment and Revocation Actions for the Service

On the Actions tab, you define the entitlements and information that the system adds, modifies, or removes when a service is assigned to, or a service is removed from, a user.

Follow these steps:

1. Click the Actions tab.

   The Fulfillment and Revocation Actions screen appears.

2. Click the Manage Fulfillment Actions button.

   The Create Policy Xpress Policy screen appears.

   Important! Some tabs in this screen contain pre-defined information to create your service. Do not change the values in these tabs: Profile, Events, Data, Entry Rules.

3. Click the Action Rules tab, then click the pencil icon to edit the pre-configured action rule.

   The Edit Action Rule screen appears.

   Important! Some information in this screen is pre-defined to create your service. Do not change the values in these fields: Name, Description, Priority. Likewise, do not change the values in the Action Rule Conditions section.

4. In the Add Actions section, click the Add Action when Matched button.

   The Add Action when Matched screen appears. On this screen, you define the actions that the system takes when the service is assigned to a user.

5. Enter a name that defines the purpose of the action.

   For example, enter "Add the Sales Manager Admin Role."

6. Select the category of action you want the system to take.

   For example, to add a role, select the Roles category.

7. Select the type of action you want the system to take.

   For example, to add or remove an admin role, select the Set Admin Role type.

8. Select the function that you want the system to perform.

   For example, to add an admin role, select the Add function.

   Note: When you select a function, a description of that function appears. This description can help you determine whether the selected function results in the system behavior you want.

9. Define the specific action that you want the system to take.

   For example, to add an admin role named "Sales Manager", enter the role name, or click the Browse button and select Sales Manager from the list of available admin roles.

10. Click OK.

    Repeat this procedure until you have added all the desired actions for this service.

    Note: Do not enter values under the Remove Actions section. Instead, continue with the following steps to define revocation actions.

11. Click OK.

    The system associates the designated fulfillment actions with the service. When a user receives the service, the system adds all associated entitlements and information.

12. Click OK.

    The Fulfillment and Revocation Actions screen appears.

13. Click the Manage Revocation Actions button.

    The Create Policy Xpress Policy screen appears.

    Important! Some tabs in this screen contain pre-defined information to create your service. Do not change the values in these tabs: Profile, Events, Data, Entry Rules.

14. Repeat steps three through twelve, adding revocation actions.

    Revocation actions are actions that the system takes when the service is removed from a user. Create revocation actions for a service that are the exact opposite of the fulfillment actions for that service. When the service is then removed from a user, all associated entitlements and information are removed from the user.

    To continue the previous example, click Add Action when Matched, then:

    • In Name, enter "Revoke the Sales Manager Admin Role."
    • In Category, select Roles.
    • In Type, select Set Admin Role.
    • In Function, select Remove.
    • Enter the role name "Sales Manager", or click the Browse button and select Sales Manager from the list of available admin roles.

    The service associates the designated revocation actions with the service. When an administrator removes the service from a user, the system removes all associated entitlements and information.

15. Click Submit

    You can now assign a service to a user.