If you want to learn the basics on how to connect to UMRA with its COM object, please see my original post on “Basics of UMRA COM”.
UMRA –Work Flow Delegation
This blog post is in continuation of my previous post on how to create Custom Web Based Work Flows with UMRA. If you haven’t already read that blog post, you should since it contains pre work and “how to” about what we are going to talk about here. So as in previous blogs I talked about how to create a custom Web Based Work Flows with UMRA so by now you should have either some work flow system in place, however, in most cases you now want to delegate out these work flows to different groups or delegated users in your Active Directory structure. With this in mind, I’ve created a very flexible way to create Role Based Access Types (RBAC ) that are database driven, and can be created very quickly, no more hard coding these different Roles into your config file. Now, some of you might be asking, how do these work with the Web Based Work Flows with UMRA you just made with UMRA. Well, you can now create custom user roles, and assign those Work flows you created to a specific roll. So below, I will give you some tips on how to integrate both systems into 1, and give you a few screen shots of how I implemented this.UMRA –Work Flow Tips
You will need to create another database for the different user types you will have coming into your portal. In most cases, we can now bind a specific group members in Active Directory to a Role Type. Now, some of you might be asking, what happens if a user has multiple Roles that you have binded to your Role Based Access Types. You can handle this in many different ways, in some cases, you can display a drop down, asking the user to select what type of RBAC they want to be, or take the first RBAC that matches in your different RBAC types. So where do you begin? First you will need to setup another table in your database, just to hold and map all the RBAC types, then you will need another table to map the RBAC types to your Custom UMRA Work Flows. Once, you’ve done this, you now can display these out onto a simple webpage, or intranet page to have your usertypes run these at will. Below are some screen shots of how I implement this.In this screen shot I created a RBAC type called “Service Desk Room 555” and binded it to a group in my AD structure, for now don’t worry about the radio box’s below the group binding.
Here I now can go back to my UMRA Work Flows and click on the little user icon in from on the Work Flow name, from here it will show me all my custom RBAC types we’ve create, and I can assign or remove access to this work flow from here.
So now I have a custom search, that brings back searched results based on a users samaccount name, from here I click the username, and it will bring up windows that shows only UMRA Work Flows that are assigned to my RBAC type. If I click one of these UMRA Work Flows it will take the user, and run then through your UMRA Work Flows.
0 comments:
Post a Comment