Which entitlement agent is ideal for simple automation?

Role-Based Entitlement is the ideal agent for simple automation because it directly links a user's access rights (entitlements) to their business role. When a user is assigned to, or removed from, a role, the Identity Manager system automatically provisions or de-provisions the associated entitlements without requiring manual intervention or complex approval steps. This direct, policy-driven mechanism provides a straightforward and efficient way to automate access management based on an individual's function within the organization.

A. Workflow: Workflows are designed for complex, multi-step processes that often require approvals, notifications, or conditional logic, making them more powerful but less simple than direct role-based automation.

B. DIRXML-EntitlementRef: This is a technical attribute within DirXML Script used to reference an entitlement policy object; it is a component of the underlying policy, not an automation agent itself.

D. Roles-Based Provisioning Module: This is the name of the entire product suite that includes roles, workflows, and the user application. It is not a specific type of entitlement agent.

1. Micro Focus Identity Manager 4.5 Administrator’s Guide to the Identity Applications, Section 11.2, "Role-Based Entitlements." This section explicitly states, "Role-based entitlements are granted to users based on their role assignments. When a user is assigned to a role, the user is granted all entitlements associated with that role." This describes the direct automation model.

2. Micro Focus Identity Manager 4.5 Administrator’s Guide to the Identity Applications, Section 11.3, "Request-Based Entitlements." This section contrasts the simplicity of role-based entitlements with request-based ones, which are granted through a workflow (Provisioning Request Definition). It states, "Request-based entitlements are granted to users through the request and approval process." This highlights that workflows are for request/approval processes, not simple automation.

3. Micro Focus Identity Manager 4.5 Policies in Designer, Section 10.1.2, "Entitlement Policies." This document details the DirXML-EntitlementRef attribute as part of the XML structure for an entitlement policy, confirming it is a low-level implementation detail, not a high-level automation agent.