Configuring Dynamic Assignment

Workflow Owner This topic is intended for SecureChange workflow owners, who are responsible for creating and maintaining workflows.

Overview

When creating a task with Assignment mode, for a given step, you can configure multiple, parallel tasks for different handlers or handling groups. The step's fields are duplicated for each task. For example, for an Approval step, you can have parallel Approve/Decline tasks, to require approval from multiple corporate departments.

If you select Dynamic Assignment mode for a step, you can also configure conditional tasks according to Access Request content, labels and/or ticket fields, including SLA status, Verification Status, Risk Status, and Risk Severity.

For example, the task could be sent to different groups depending on the affected networks or target firewalls. When multiple conditions are met (for example, the Access Request contains multiple traffic pattern values so that more than one network or target firewall is affected), multiple (parallel) tasks are created. Each task contains only the Access Request traffic pattern values that fulfills its condition; all Access Request traffic pattern values resulting from the step's tasks are passed on to the following step.

Workflows and Configuration Options

The workflow you create determines which configuration options are available for dynamic assignment: conditions list and/or custom script.

For the following workflows, when multiple tasks are opened on the same step by Dynamic Assignment, no changes can be made to the rules or objects within the rules, and all tools (such as Designer and provisioning) are disabled for the handlers, even if the same handler is configured for all the tasks in the step: 

  • Rule Decommission
  • Rule Modification
  • Rule Recertification
  • Decommission Network Object

In the Access Request workflow, when more than one task is created, the Designer results will not be copied to the current or subsequent steps. If only one task is created, there are no restrictions and the single task proceeds according to the configured permissions.

Dynamic assignment by script is supported for all workflow types.