The method for giving Identity Governance users the ability to request and approve access varies.
Access Request Activity |
Configuration Method |
Configured By |
---|---|---|
Add items to Browse list |
Create an Access Request policy and add items to the policy. |
Global Administrator or Request Administrator |
Add items to Recommended items list |
Add items to a request policy that are covered in a business roles policy. |
Global Administrator or Request Administrator |
Specify approval rules for request Items |
Create a request approval policy and assign permissions, applications, or roles to that policy either while editing the policy definition or in the catalog using bulk select menu. |
Global Administrator or Request Administrator |
Specify coverage map for request approvals |
Create coverage map in CSV format, add/upload it to application (Administration > Coverage Maps), and then specify approvers in a request approval policy as coverage map. For information about creating and loading coverage maps, see Using Coverage Maps. |
|
Configure request item text or icons |
Edit the permission, application, or technical role in the data source, the catalog, or with the bulk edit feature. |
Global Administrator or Request Administrator |
Manage how requests are fulfilled |
Identity Governance Fulfillment > Configuration. For information about configuring fulfillment targets, see Configuring Fulfillment. |
Global Administrator or Request Administrator |
Manage who can request on behalf of others |
Requesters tab in appropriate Request Policy. |
Global Administrator or Request Administrator |
Manage email notifications for request approvals |
Notifications section in each approval step of the appropriate Request Approval Policy |
Global Administrator or Request Administrator |
Create an Access Profile to allow requesting collections of authorizations |
Technical role in the catalog added to Request Policy |
Global Administrator or Request Administrator |
Control approval decision support information |
Similarity profile settings in Identity Governance Administration > Role Mining and Analytics Settings. For information about configuring similarity profile settings, see Configuring Analytics and Role Mining Settings. |
Global Administrator or Request Administrator |