Is it possible to approve a request by users who belong to specific LDAP groups in CA Service Catalog?

Document ID : KB000109290
Last Modified Date : 02/08/2018
Show Technical Document Details
Question:
Is it possible to approve a request  by users who belong to specific LDAP groups in CA Service Catalog?
Environment:
CA Service Catalog 12.9 and later
Active Directory (LDAP)
Process Automation (PAM)
Answer:
Catalog has 4 options for the approval:
  1. No Approval
  2. System Approval Process
  3. Workflow Driven Approval Process
  4. Policy driven approval

To be able to approve by users who belong to an specific LDAP Group, you can use Policy driven approval or Workflow Driven Approval Process.

- Policy driven approval is native from Catalog. To configure it:

1. Ensure EEM being used by CA Service Catalog is connected to LDAP
2. Log into Catalog as Service Delivery Administrator > Catalog > Policies > Select the policy
3. In the frame below, click on  Assignees lookup icon > Set Assignee Type: Group > Click on lookup icon below > Select group from LDAP > OK > Save.

- Workflow Driven Approval Process will use PAM to run a process and then through a Catalog WebServices (assignPendingAction method) the group can be assigned.
Additional Information:
Further information about the approval process:
https://docops.ca.com/ca-service-management/14-1/en/using/request-management/request-management-using-ca-service-catalog/approval-processes-and-fulfillment-processes