Grace Days for transferring identities
The Grace days property specifies the number of grace days used when creating new transfer context assignments for the old context, using the Identity transfer code method. This will create an identity transfer object, which can be used for reporting, auditing, and retrieving old managers of an identity in the transfer identity assignments survey.
The Grace days can be configured on the CT-GRACEDAYS property on the context type. It does not apply to personal contexts, for example, employment. If you want to apply the Grace days property to other context types, you need to set the Grace days property for the context type, then create a new event definition, similar to the transfer identity assignment, which is configured for the specific context type you want to use. The value of the grace days should vary between 0-365 days, where 0 means no context assignment is created.
The grace period can be configured on each context type, through the Context Types view. When configured, this grace period creates a context assignment for the old context assignment when an identity moves to another business context, allowing the identity to keep assignments for the set number of days.
For example, let's assume that an identity is transferred from the org. unit R&D Berlin to the org. unit R&D Cologne and either of the following is true:
- The identity has an access right due to an access request where their department is stated as business context.
- The identity has an access right due to an assignment policy scoped for their department.
In this situation, the Identity's permission assignments for approving purchase orders in the R&D Berlin org. unit will be removed once when they move to the other department unless the Grace days concept is used, in which case, the original permission assignment will be retained for a set number of days of the Grace days.