Task Configuration Properties
Task configuration properties control display properties and certain behaviors for the task.
cim143
Task configuration properties control display properties and certain behaviors for the task.
This page contains the following topics:
Task Icon Path
Task Icon Path
Specifies the URL for a graphic to use as an icon for this task in task lists.
Task Icon Preview
Task Icon Preview
Displays the icon for the task, as it appears in task lists.
Target Window
Target Window
When you provide a value in this field,
Identity Manager
opens this task in a new browser window. Use this field to open a new browser window for an external task that redirects users to another website.
You can specify any name for the window.
Do not use this field to open
Identity Manager
admin tasks in a separate browser window. Identity Manager
does not support multiple browser windows for a single Identity Manager
user session.Task Configuration Properties
Task Configuration Properties
You can enter configuration properties for a task
All properties are case-sensitive! Enter them exactly as they appear.
CheckRolesNotPolicies
By default, Identity Manager checks all policies to determine if user is a member or an administrator of an Admin role. By selecting this property, Identity Manager checks if the user is a member or an administrator of the role itself, rather than go thru the entire list of policies. This check is more efficient in cases where there are only a small number of Admin roles.
DisableDynamicGroupEvaluation
which can be set to "true"
This Task Property disables dynamic group evaluation where ever possible. This should be used if your directory model includes %GROUP_ADMIN% and %GROUP_ADMIN_GROUP% which means all evaluation can be managed by Group attributes alone.
DisableUISecurityCheck
Disables a security check during task session creation to determine if the administrator can execute the task. Setting
DisableUISecurityCheck
to true for a task applies the property only to the user interface, and not to TEWS; the reason is that the administrative tasks are determined for the administrator when the administrator logs in to the user interface. Seting this property set disables the check when the task executes.DisableNestedGroupEvaluation
This property disables nested group searches on a per-task basis. Setting this property to True greatly improves the time needed to return search for nested groups. The default Group Type setting is ALL, which may impact performance.
DisableNestedAdminGroupEvaluation
The
DisableNestedAdminGroupEvaluation
property applies to groups that are admins of other groups. The DisableNestedAdminGroupEvaluation property disables these nested group searches on a per-task basis. Setting this property to true improves the time needed to return searches involving nested groups; this is because nested groups will not be evaluated on a per-task basis. The default setting is false.ImmediateTEWSResponse
TEWS responds immediately with a transaction ID after saving the task session to the database. In other words, when a task generates a task ID and saves the task session, TEWS creates response object. The
ImmediateTEWSResponse
property can be set on both the task and/or as an HTTP header variable (such as the HTTP header on the SOAP user interface).The
ImmediateTEWSResponse
property only applies to TEWS execute operations and protected tasks. The ImmediateTEWSResponse
property only applies to the JBoss family of application servers. Due to WebSphere limitations, ImmediateTEWSResponse
does not work in a Websphere environment. isTabsOnDemand
The
isTabsOnDemand
property determines whether each of your task’s open, related tabs render only when individually selected, or whether to simultaneously render all of your task’s open, related tabs. In other words, this property determines when to render a task's related tabs.Setting the
isTabsOnDemand
property to true enables it, meaning that a tab page is initialized at the time of screen rendering. Setting the property to false means all tabs that are part of the chosen task will be initialized before the screen is rendered to the user, which can affect UI performance for tasks with a large number of tabs.Follow these steps:
- In the task’sProfilescreen, clickConfiguration Properties.
- ClickAddto add theisTabsOnDemandproperty.
- Set the value totrueto enable it.
- ClickOK.
SwitchTabWhenInvalid
Normally, when a user enters an invalid value for any task-screen attributes configured to require validation (such as required fields), and then attempt to move to a different tab, the system generates an error. Any errors appear in the top-half of the tab, and remain in a task until a user enters valid information.
Setting the
SwitchTabWhenInvalid
configuration property to false
means a user will not be able to move (or switch) from a tab that has any invalid entries to another tab until that tab has all valid entriesSetting this property to false makes the property work for all tasks in the environment.
This property applies to any tasks using the Standard tab controller, the Sequence Tab Controller, and Wizard Tab Controller.
If you enable the
SwitchTabWhenInvalid
property in your task or environment (in which cas it applies to all tasks), you can click any validation message to send you to the attribute that failed validation on the page. In other words, the user can select the error message and go to the screen field attribute that has the error. The links only work for screen field attributes and pages with a screen context. For example, the links will not work on View Submitted Tasks
as that context does not include a screen.UseIsRoleAdmin
Checks to see if the Administrator can administer the roles assigned to a user. CA Identity Manager check if the Administrator can assign the candidate roles to the subject-user. This property uses an algorithm that can be faster than the default, because the default approach checks every policy (and its role) belonging to the Administrator for a match with the roles assigned to a user. The default algorithm searches the entire list of possible roles and compares them to those assigned to the user.
Only use
UseIsRoleAdmin
when the user has a small number of provisioning roles relative to the total number of provisioning roles in the environment. The UseIsRoleAdmin
property can be detrimental to performance if the subject user has many provisioning roles. Specifically, because every role belonging to the subject user is cross-checked with the administrator. The more roles, the less-optimal performance.UseWorkflowApprovalHandler
The
UseWorkflowApprovalHandler
property allows the user interface thread to revert control to the user in the timeout period specified for the Identity Manager
environment (the Job Timeout
property in the User Console’s Advanced Settings).The
UseWorkflowApprovalHandler
property lets you align task-level workflow to the identity manager synchronous tasks model. Tasks requiring certain types of workflow approval processes, such as multi-step approvals and/or lengthy participant resolver calculations, can delay both the task submission action and the subsequent return of control back to the user. The UseWorkflowApprovalHandler
property allows the user interface thread to revert control to the user in the timeout period specified for the Identity Manager
environment (the Job Timeout
property in the User Console’s Advanced Settings).For example, when using a multi-stage workflow process definition configured at either the task or event-level,
Identity Manager
would not return control to the user until the asynchronous phase of the associated Workflow completes. This can take a long time if the customer has configured custom participant resolvers that perform additional user searches. This Workflow phase processing is currently handled under the same UI thread run when the user clicks Approve
.The
UseWorkflowApprovalHandler
Task-level property ensures that a separate thread handles the asynchronous phase. This means the Task Notification Service is informed about this phase so that the UI thread returns control in a timely manner as configured in the Job Timeout
property for the Identity Manager
environment. The UseWorkflowApprovalHandler
is set on the task performing the approval. It can be used for both Task and Event-level Workflows.Follow these steps:
- Assume that you are associating aModifyuser task with an out of the box template “TwoStageApprovalProcess”, as this is the only default multi-stage approval process.
- Set the new property on the task that actually performs the approval. For this example, runModify Admin Task,Approve Admin Task.
- In theProfilescreen, clickConfiguration Properties.
- ClickAddto add theUseWorkflowApprovalHandlerproperty.
- Set the value to false to enable it.
- ClickOK.
If you have custom workflow process definitions, make sure that you set the property correctly on the task associated with approvals.