Without entitlements, business rules won't do anything. During the enforcement process, entitlements are what business rules give out or take away from an end user. These can be accounts, group memberships, or accesses.
Modify business rule entitlements
While adding a new business rule, or modifying an existing one, you can change the entitlements of the rule. Note that you can only do this after you have added a target system.
Add an entitlement
To begin adding an entitlement to a business rule, click the plus sign button in the Entitlements section. This will bring up a list of your configured target systems.
Select the target system for which you want to add the entitlement. This will expand the view downwards and display a list of entitlements available for the selected system.
The available entitlements depend on the selected system, and can vary from one to another. In general, however, there are three basic entitlements.
This is a user account object. When granted by HelloID provisioning, a new account is created for qualifying persons in the target system. The accounts are created in a disabled state, until access is granted.
- Account Access
This entitlement is what enables the accounts after they have been created by HelloID provisioning. This is a separate entitlement, as organizations may want to issue disabled accounts prior to an end user's start date, and then activate the account when the end user shows up for work.
- Group Membership
The group membership entitlement will add the end user's account to the selected group. You will most often find a single entitlement for every available group in the target system.
Click the plus sign button next to the entitlements that you wish to apply as part of this business rule, and click the Close button.
Delete an entitlement
To delete an entitlement from a business rule, you may click on its trashcan icon. The next time the rule is run, the entitlements will be removed from the end user (group membership removed, account disabled or deleted, etc.).