Skip to main content
Version: Angophra

Configuring Actions

Overview​

In this article, you can find information on how to configure actions in Apporetum. Actions are defined in the Actions tab of a transition and determine the automated tasks Apporetum performs when an account moves from one state to another.

tip

Before configuring actions, ensure you have created a transition and completed the General tab. See Configuring the State Model for guidance on creating transitions.

How Actions Work​

Each transition in Apporetum can have one or more actions associated with it. When an account satisfies the trigger rules for a transition and moves to a new state, Apporetum executes all configured actions for that transition in the defined order. If multiple actions are present, you can reorder them to control the sequence in which they run.

Adding an Action​

  1. Select Add Transition on a state, or open an existing transition.
  2. Complete the General and Triggers tabs. See Configuring the State Model and Configuring Transition Rules for details.
  3. Select the Actions tab.
  4. Select Add Action.
  5. Select the action type from the list. See Action Types below for a description of each option.
  6. Configure the settings for the selected action type.
  7. If you need to add more than one action, repeat steps 4 to 6. You can reorder actions by dragging them into the desired sequence.
  8. Select Save Changes.

Action Types​

Apporetum provides the following action types for use in state model transitions.

Publish Event​

When the account transitions to the new state, Apporetum publishes an event to the Event Grid. Use this action to trigger downstream workflows or integrations across your ecosystem.

Manage Entitlements​

When the account transitions to the new state, Apporetum adds or removes the account from one or more application roles. Use this action to automatically grant or revoke access as part of a lifecycle transition, such as provisioning access on-boarding or revoking access on termination.

Harvest Entitlements​

When the account transitions to the new state, Apporetum records a snapshot of the account's current entitlements and then removes them. The harvested entitlements are retained so they can be restored later if required.

Restore Entitlement​

When the account transitions to the new state, Apporetum restores the account's entitlements to the state captured during the most recent harvest. Use this action in conjunction with Harvest Entitlements for scenarios such as returning from leave.

Send Email Notification​

When the account transitions to the new state, Apporetum sends an email notification. You can configure the notification to be sent to the primary account holder, their manager, the account itself, or a specified email address.

tip

Email notifications are sent using mail templates. Refer to Configure Email Notifications in the Learn documentation for guidance on creating and managing mail templates.

Update Account State​

When the account transitions to the new state, Apporetum updates the account's status in Microsoft Entra ID. The available options are Enable, Disable, or Delete the account.

warning

The Delete option is irreversible. Ensure your state model is thoroughly validated with a simulation before publishing any transition that includes a delete account action.

Move Account OU​

When the account transitions to the new state, Apporetum moves the account to a specified Organisational Unit (OU). Use this action in environments where OU membership is used to govern Group Policy or other directory-based controls.