Reference: [Limited Early Access] What is the Policy Feature?
Overview
This page explains how to create a workflow using the "License Optimization" template in Josys's Workflows feature. For general information about workflows, please refer to the help page below.
Reference: About the Workflows Feature
Target Audience
- IT Administrators
About This Template
With this template, you can create a workflow that automatically processes inactive accounts when an app is detected as unused.
What You Can Do
You can configure settings such as the following:
- Registering the deletion of inactive app accounts for each user as a task in Josys.
- Automatically deleting accounts when a trigger is activated, provided Josys has the authority to delete accounts for that app.
Workflow Configuration Example
With this template, you can build a flow like the one shown below. This is just an example.
Triggers That Execute the Workflow
Workflows can be executed manually or automatically. Manual execution is a method where you select users to run the workflow. Automatic execution can be triggered when a user is determined to have no app usage and is flagged as inactive.
Supported Scope by App
How to Create a Workflow
Setting Up Triggers
- Click Workflows from the Josys side menu.
- The template list will be displayed. Hover over the template you want to use and click Create Workflow.
- Set up the triggers.
By default, "On-Demand" is added. This trigger is used to manually start the workflow by selecting users. If you want the workflow to run automatically based on inactivity detection, add other triggers.
*All displayed triggers will execute on an "OR" condition. - Click Next at the bottom right.
Setting Up Target Apps
- Select the apps for which you want to process accounts when the workflow is triggered.
- Once selected, click "Next."
Setting Up Conditions (Optional)
If the apps you want to provision vary by department, job title, or employment type, set up the conditions and click "Next" at the bottom right. If no conditions are needed and you want to provision accounts for all employees, click "Skip" at the bottom right.
Example of condition settings: If you want to run this workflow only for users whose department is General Affairs and whose employment type is Full-time, set the conditions as shown in the screenshot.
Setting Up Access Review
After the trigger is activated, you can send a single question asking "Is it okay to delete this app account?" to either the triggered user or a specified email address. You can also branch the subsequent actions based on the configured answer options. Choose whether or not to send a confirmation question.
If you select "Add Confirmation Question":
- Set up the question and the answer options.
- Set up the recipients.
- Send to App User: The question will be sent to the user whose status has changed. If the user has already left the company, they may not be able to answer. In such cases, select "Send to Reviewer/Owner."
- Send to Reviewer/Owner: Select the recipients to send the question to. You can select multiple people.
⚠️Even if multiple people are selected, once one of them answers, that answer will be applied, and other users will no longer be able to answer.
- Select the notification method. You can configure this if you have integrated with Slack or Teams. Email is selected by default and cannot be removed.
- Click "Next" at the bottom right.
If you select "Do Not Send Confirmation Question": Click "Next" at the bottom right.
Setting Up Actions
Set up the actions you want to execute when this trigger occurs.
- Click "Add Action" to add an action. Please refer to the link below for details on each action.
About Actions That Can Be Configured in Workflows - Set up the actions to run after the trigger occurs.
If you configured "Access Review" in the previous step, you can change the process based on the answer options.
Example: "Is it okay to delete this app account?" -> If the answer is "No," do nothing. If the answer is "Yes," delete the account. - Once configuration is complete, click "Next" at the bottom right.
Action Configuration Example 1: To automatically delete accounts for apps detected as inactive and send an email notification
Add Action 1 "Delete User" and Action 4 "Send Email."
Action Configuration Example 2: To have users with inactive apps answer a survey, branch actions based on the results, and notify the assignee of the task details via email
Add Action 4 "Send Email" and Action 3 "Add Manual Task."
*Note that account deletion and other tasks will need to be performed manually.
Final Confirmation
The final confirmation page will open. Set the workflow name and review the details.
If everything is correct, click "Save Workflow" at the bottom right.
If you do not want to enable the workflow yet, click the "Enable Workflow" toggle to the left of the button to disable it.
Frequently Asked Questions
Q: When will the survey for the inactivity workflow be sent?
A: For app owner reviews, it is sent every 30 minutes after the workflow is executed. For app user reviews, it is sent immediately after the workflow is executed.
Q: After disabling a workflow, can I cancel an account suspension/deletion scheduled by the workflow for a certain number of days later?
A: Even if you disable the workflow, any workflow that has already been executed will not be canceled.