Business rules tell HelloID Provisioning what entitlements to grant to which Persons. But how do you know precisely what HelloID will do? And once you know that, how can you manually tell HelloID to take those actions? The answer to those questions is evaluation and enforcement, respectively.
An evaluation is a read-only run. During an evaluation, HelloID uses the business rules to determine which actions it should perform on end users, but no changes are saved. This is useful for previewing the effects of your business rules.
On the other hand, an enforcement actually saves changes to target systems. Enforcement occurs automatically after a scheduled import of source systems, or can be performed manually.
After you have configured one or more business rules, go to Business Rules > Evaluations to preview their effects.
The Evaluation History page is split into two panes:
A date-ordered list of all evaluations and enforcements. Select an entry to view it in the Actions pane.
A list of actions included in the selected evaluation or enforcement. (Only the first 500 actions are shown. To see actions beyond those, export a CSV report.) Blocked actions show a Blocked label in the Operation column. To resolve blocked entitlement actions, see Blocked entitlements.
Export a report
Select the Export button to download a CSV report containing all actions associated with the currently selected History entry.
Start an Evaluation
To start an evaluation, select the Evaluate button. HelloID evaluates the business rules and their entitlements, and adds a new entry to the History pane. Persons' target accounts proceed through the various lifecycle stages depending on the entitlements being granted and/or revoked. When the evaluation is complete, select the new entry to preview the actions HelloID will take.
Start an Enforcement
If the evaluation looks good, you can start a manual enforcement. To do so, select the Enforce button. HelloID processes the business rules and applies entitlements to Persons from the source system(s). When finished, a new entry is added to the History pane. Select the new entry to see a list of all changes written to the target system(s). You can also see real-time summary statistics in the system's tile on the Target Systems Overview.
Enforce with Resources
The Enforce+ button, accessible by clicking the dropdown icon next to the Enforce button, also starts a manual enforcement. However, unlike the standard Enforce button, it first processes Resources in custom PowerShell target systems.
If Resources fail, there is no stop condition. The enforcement continues and all entitlement actions are still attempted. However, any entitlements which depend on failed Resources will also fail.
Note that Resources are never included in Evaluations. To preview a Resource, use the Preview feature associated with its PowerShell script.