Skip to content

Commit 82f6283

Browse files
committed
mention LCW tasks
1 parent 4d2099f commit 82f6283

File tree

1 file changed

+44
-0
lines changed

1 file changed

+44
-0
lines changed

articles/active-directory/governance/entitlement-management-access-package-assignments.md

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -200,6 +200,29 @@ $policy = $accesspackage.AssignmentPolicies[0]
200200
$req = New-MgBetaEntitlementManagementAccessPackageAssignmentRequest -AccessPackageId $accesspackage.Id -AssignmentPolicyId $policy.Id -TargetEmail "[email protected]"
201201
```
202202

203+
## Assign access from a lifecycle workflow
204+
205+
In the Microsoft Entra Lifecycle Workflows feature, you can add a [Request user access package assignment](lifecycle-workflow-tasks.md#request-user-access-package-assignment) task to an onboarding workflow. When the workflow runs for a user, then an access package assignment request can be created automatically.
206+
207+
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a global administrator.
208+
209+
1. Browse to **Identity governance** > **Lifecycle workflows** > **Workflows**.
210+
211+
1. Select a join (onboarding) or move workflow.
212+
213+
1. Select **Tasks** and select **Add task**.
214+
215+
1. Select **Request user access package assignment** and select **Add**.
216+
217+
1. Select the newly added task.
218+
219+
1. Select **Select Access package**, and choose the access package the user should be assigned to.
220+
221+
1. Select **Select Policy**, and choose the access package assignment policy in that access package.
222+
223+
1. Select **Save**.
224+
225+
203226
## Remove an assignment
204227

205228
You can remove an assignment that a user or an administrator had previously requested.
@@ -245,6 +268,27 @@ if ($assignment -ne $null) {
245268
}
246269
```
247270

271+
## Remove an assignment from a lifecycle workflow
272+
273+
In the Microsoft Entra Lifecycle Workflows feature, you can add a [Remove access package assignment for user](lifecycle-workflow-tasks.md#remove-access-package-assignment-for-user) task to an offboarding workflow. When the workflow runs for a user, then an access package assignment can be removed automatically.
274+
275+
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a global administrator.
276+
277+
1. Browse to **Identity governance** > **Lifecycle workflows** > **Workflows**.
278+
279+
1. Select a leave (offboarding) workflow.
280+
281+
1. Select **Tasks** and select **Add task**.
282+
283+
1. Select **Remove access package assignment for user** and select **Add**.
284+
285+
1. Select the newly added task.
286+
287+
1. Select **Select Access packages**, and choose one or more access packages the user should be removed from.
288+
289+
1. Select **Save**.
290+
291+
248292
## Next steps
249293

250294
- [Change request and settings for an access package](entitlement-management-access-package-request-policy.md)

0 commit comments

Comments
 (0)