IPA approval flow push

Is there any way when a workunit is sitting in users inbasket to take action like "Approve" or "Reject", a super user can take that action on behalf of the user. I am not asking for delegation or time out setup. The user is busy in meeting, so the super user would like to take action, so that the flow will continue for next process. Also the super user is not a IPA Administrator, so his/her action should be restricted to set of workunits in Rich Client. The super user should not be provided access like IPA Administrator. Is there any specific security setup done to achieve this.

Find more posts tagged with

Process Automation (IPA) - General Discussions

Comments

infor

If I understand you correctly, you know how to do it, going into Rich Client & go to Start, My Inbasket, Action, Create, Select the user (the one who will be taking the action), search the Task & select the user you want to complete the task for. I use * partial actor id *. Enter at minimum a start date.

Security wise, I believe assigning the HR Administrator Task, not a security role, will allow the user to "Approve or Reject". I'm not certain what else that HR Administrator task allows, but I believe it would include any tasks waiting for an action as long as you add the user you want to be able to take action for as referenced above. Also you can use a proxy role. We haven't used that yet but it is available for use to "proxy" your work to someone else.

Legacy Contributor

I'd agree with the statement from kbmightym. If you want this super-user to have permanent access, then set them up under the task, if it's just a temporary thing, then I would set them up as a proxy.

We've actually done this both ways, one of our VP has super user access for capital requisition approval only at the VP level, and is set up under that task. We filter tasks by name, so he has all of the VPs names to which he is a super-user for added to his task filtering rules.

rmbell

Not sure on the security front, but if the user in question has access to the workunits, they can approve through the user action, routing tab. This user not being an IPA admin, may not have access to that.

Legacy Contributor

We took a different approach, but it requires modifying the flows to do it. We created a PfiTask named "Action Override", and assigned a small number of "SuperUsers" to that PfiTask.

We then added that PfiTask as a secondary assignee on every UserAction node for the flows we care about, but we don't include them on the email notifications (we always keep the email notification separate from the UserAction task).

When an action needs to be approved and the "regular" approver is not available, one of the "Action Override" members can go to their inbasket and take action under the "Action Override" task. Note that the person who took the action would appear in the auditlog.

Kelly

Legacy Contributor

Thanks for the solution and reply, but I believe this is going to work before the flow got executed. My requirement is a flow already got triggered and it is sitting in TEST1 users inbasket and he is in a meeting. On behalf of him TEST2 who is a super user has to take action immediately, so that the flow can be continued. How we can achieve it.

Legacy Contributor

This works well. We have to find out how a super user can be restricted to do only this task for specific work units, other wise we will violate the security policy.

Legacy Contributor

What you're describing is proxy. I think you should take that approach rather than a flow approach.

Copyright © 2025 Infor. All rights reserved.