When users request access to resources, they initiate workflows that execute one or more EmpowerID Operations on those resources in a manner consistent with the workflow. For example, when a user seeks to join a Management Role, the corresponding workflow initiates operations targeting both the user and the Management Role to update the user's role membership. By default, if a user initiates a workflow but does not have the necessary permissions to execute certain operations within it, the authorization engine issues a notification indicating the lack of required access. This default mode is suitable for admin workflows that do not require approval. For processes needing approval, EmpowerID offers a robust workflow engine that can be enabled on a per-workflow basis.
Learn about the EmpowerID Approval Engine, its workflow routing, policies, and processes.
Learn about resourceless approval workflows in EmpowerID and how they ensure proper authorization during person onboarding when ResourceIDs are not yet established.
4 items
5 items
2 items