Business rules tell HelloID Provisioning what entitlements to grant to which Persons. But how do you know precisely what HelloID will do? And once you know that, how can you manually tell HelloID to take those actions? The answer to those questions is evaluation and enforcement, respectively.
An evaluation is a read-only run. During an evaluation, HelloID uses the business rules to determine which actions it should perform on end users, but no changes are saved. This is useful for previewing the accuracy of your business rules.
On the other hand, an enforcement actually applies business rules and saves changes to target systems. Enforcement occurs automatically after a scheduled import of source systems, or can be performed manually.
After you have configured one or more business rules, you can evaluate those rules to see what HelloID will do. Go to Business Rules > Evaluations to get started. This will bring up the Evaluation History page. If no activity has occurred, this page will be mostly blank.
The Evaluation History page is split into two parts.
- History List
This is a date-ordered list of all evaluations and enforcements. Select an entry to view it in the Actions List.
- Actions List
This is a list of every action taken during the selected evaluation or enforcement. This includes the Operation that was performed (Grant, Revoke, or Update), the Entitlement name, the affected Person, and the name of the target System. Additionally, blocked actions show a Blocked label in the Operation column. To resolve blocked entitlement actions, see Blocked entitlements.
Start an Evaluation
To start an evaluation, select the Start new evaluation button. HelloID evaluates the business rules and their entitlements, and adds a new entry to the History List. When the evaluation is complete, select the new entry to preview the actions HelloID will take.
Start an Enforcement
If the evaluation looks good, you may start a manual enforcement. To do so, select the Start new enforcement button. HelloID processes the business rules and applies entitlements to Persons from the source system(s). When finished, a new entry is added to the History List. Select the new entry to see a list of all changes saved to the target system(s).