IBM BPM, V8.0.1, All platforms > Get started with IBM BPM > Key concepts > BPEL processes and human tasks > Human tasks overview > Authorization and people assignment

People assignment criteria

People assignment criteria are constructs used in the task model to identify sets of people that can be assigned to an instance-based authorization role. At run time, the people resolution uses the people assignment criteria to retrieve the user IDs and other user information from the people directory, for example, for composing emails. People assignment criteria are also used during run time when task models are created programmatically.

You can use people assignment criteria definitions in Integration Designer to model people assignments for task roles. A definition comprises a query name and a set of query parameters. When the task is deployed, the assignment criteria are transformed into queries that are specific to the people directory, for example, virtual member manager. When the task runs, these queries retrieve the set of people who are assigned to a role, such as potential owner.

The following example illustrates the steps that are involved in implementing a people assignment criteria definition for a task role:

1. In Integration Designer, a modeler associates a new task with the people directory configuration, for example, for virtual member manager, bpe/staff/samplevmmconfiguration.

   This step determines which people assignment criteria are available for people assignment.

2. In Integration Designer, the modeler associates a task role with people assignment criteria.

   For example, the potential owner role is associated with the people assignment criteria Group Members, including the parameters:

   • GroupName set to the value cn=group1, dc=mycomp, dc=com

   • IncludeSubgroups set to the value true

3. When the task is deployed, the people assignment service establishes which people directory provider to use. It transforms the people assignment criteria into a query for the people directory provider, which is stored internally.

Depending on the people directory that is used, different subsets of the predefined people assignment criteria are available when the task is modeled:

• The LDAP and virtual member manager people directory providers support all of the predefined definitions

• The user registry people directory provider supports only those definitions that are based on user and group names. Support is not provided for definitions based on manager, or email attributes.

• The system people directory provider is for testing purposes only. Support is limited to specifying a set of hard-coded user IDs so that access to a people directory is not required.

Authorization and people assignment for human tasks

Related concepts:
Customize people assignment criteria in Integration Designer

Related reference:
Predefined people assignment criteria