Shine a light on shadow apps

ConductorOne Docs

Complete provisioning and deprovisioning tasks

Provisioning or deprovisioning tasks are assigned to you when your help is needed to manually provision or deprovision access for a colleague.

Complete a provisioning task

A request to grant new access has already been reviewed and approved. A provisioning task is now assigned to you because manual provisioning of the new access is required and you are a designated provisioner for the app.

Step 1: Receive a notification and go to the task

ConductorOne sends you notifications by email and Slack (if enabled) whenever a provisioning task is assigned to you. Make sure that notification emails can reach your inbox by adding no-reply@conductorone.com to your email contacts list.

Go to Interact with ConductorOne via Slack for instructions on setting up our Slack app.

  1. Log into ConductorOne by clicking the link in your email or Slack notification.

  2. If the link in your notification does not automatically direct you to the task, locate it by clicking on Requests in the Assignments section of the navigation panel. The badges next to each of these menu items show the number of tasks of each type currently awaiting your attention.

Step 2: Review the task and take action

  1. Go to the Awaiting provisioning tab on the Requests page. Each line in the table is a provisioning task assigned to you.

  2. Complete the provisioning process in the requested app and click to Mark provisioned. Click the more actions ( … ) menu for additional options, such as marking the provisioning as errored.

  3. If you need additional guidance or context, click the task number to open the task’s details page. Here you’ll find additional information:

    • If the ConductorOne admins at your company have provided any notes or instructions for how to complete the provisioning assignment, these are shown on the details page.

    • The Comments section shows any notes other members of your organization have made about this task.

    • The Task details section shows the task’s workflow, highlighting the role you play, and the policy being applied to this task. In this section you’ll also find controls to reassign the task, if reassignment is allowed.

Step 3: Repeat the process

Repeat these steps to complete each provisioning task assigned to you. Click Completed tasks to see everything you’ve finished so far.

Complete a deprovisioning task

A request to revoke access has already been reviewed and approved. A deprovisioning task is now assigned to you because manual deprovisioning of the revoked access is required and you are a designated deprovisioner for the app.

Step 1: Receive a notification and go to the task

ConductorOne sends you notifications by email and Slack (if enabled) whenever a deprovisioning task is assigned to you. Make sure that notification emails can reach your inbox by adding no-reply@conductorone.com to your email contacts list.

Go to Interact with ConductorOne via Slack for instructions on setting up our Slack app.

  1. Log into ConductorOne by clicking the link in your email or Slack notification.

  2. If the link in your notification does not automatically direct you to the task, locate it by clicking on Revocations in the Assignments section of the navigation panel. The badges next to each of these menu items show the number of tasks of each type currently awaiting your attention.

Step 2: Review the task and take action

  1. Go to the Awaiting deprovisioning tab on the Revocations page. Each line in the table is a deprovisioning task assigned to you.

  2. Complete the deprovisioning process in the requested app and click to Mark deprovisioned. Click the more actions ( … ) menu for additional options, such as marking the deprovisioning as errored.

  3. If you need additional guidance or context, click the task number to open the task details page. Here you’ll find additional information to help you:

    • If the ConductorOne admins at your company have provided any notes or instructions for how to complete the deprovisioning assignment, these are shown on the details page.

    • The Comments section shows any notes other members of your organization have made about this task.

    • The Task details section shows the task’s workflow, highlighting the role you play, and the policy being applied to this task. In this section you’ll also find controls to reassign the task, if reassignment is allowed.

Step 3: Repeat the process

Repeat these steps to complete each deprovisioning task assigned to you.

To take the same action on multiple tasks at once, select each task by clicking its checkbox, then select the action from the menu at the bottom left. You’ll be prompted to add a comment about your action, which is posted on each impacted task.

Click Completed tasks to see everything you’ve finished so far.

Reassign a provisioning or deprovisioning task

In some cases, such as when an employee has moved to a new position in the company or when a colleague is out of the office on an extended vacation or leave, the task cannot be completed by its assigned reviewer and must be reassigned.

  1. In the task list, click Reassign. Alternatively, from a task’s details view, click Reassign in the Assigned to area.

  2. Select the new assignee and provide a reason for the reassignment.

The newly assigned reviewer will receive email and Slack (if enabled) notifications about their new task assignment.