Target system thresholds
Target system thresholds are configurable "breakpoints" in the Enforcement process. They temporarily block enforcement when data has significantly changed or may be missing, so you can review the situation before enforcement proceeds. They reduce the likelihood of a major error in the provisioning process if your Persons contain bad or missing data, or if your Business rules are misconfigured.
To get started, Set thresholds.
Target system thresholds can be configured to trigger Blocked actions when the number of grant, revoke, and/or update entitlement actions in an enforcement exceeds a specified value:
Grant step of enforcement
Permission (including Group Membership)
Revoke step of enforcement
Permission (including Group Membership)
Update step of enforcement
Important
Target thresholds are triggered before any entitlement actions of the relevant type are performed. For example, if the Account Grant threshold is set to 10, and an enforcement attempts to grant 30 accounts, zero accounts will be granted (rather than 10 being granted and the remaining 20 being blocked). No entitlement actions are performed for an entitlement type that hits its threshold, until you Resolve blocked actions.
When a target threshold is exceeded during enforcement, only entitlement actions of that type are blocked. Any entitlement actions of other types in the enforcement, which did not exceed their thresholds or do not have thresholds, are executed as normal. This means that enforcements may be executed only partially. This is different than source thresholds, which operate on an all-or-nothing basis.
Thresholds can be specified in absolute (count) or relative (percentage) terms, and are triggered on an equal-to-or-greater-than basis. If you set both absolute and relative thresholds, they are evaluated with OR logic.
To receive email notifications when target system thresholds are exceeded, Add a notification (email) and configure it as a Blocked Actions Summary.
A related but distinct feature is Exclusions. Exclusions do not interrupt the enforcement process, but instead selectively exclude Persons from it.
Also see Thresholds.