27.3 Assigning Request to Identity Governance Users

The method for giving Identity Governance users the ability to request and approve access varies.

Access Request Activity

Configuration Method

Configured By

Add items to Browse list

Create an Access Request policy and add items to the policy.

Global Administrator or Request Administrator

Add items to Recommended items list

Add items to a request policy that are covered in a business roles policy.

Global Administrator or Request Administrator

Specify approval rules for request Items

Create a request approval policy and assign permissions, applications, or roles to that policy either while editing the policy definition or in the catalog using bulk select menu.

Global Administrator or Request Administrator

Specify coverage map for request approvals

Create coverage map in CSV format, add/upload it to application (Administration > Coverage Maps), and then specify approvers in a request approval policy as coverage map.

For information about creating and loading coverage maps, see Using Coverage Maps.

 

Configure request item text or icons

Edit the permission, application, or technical role in the data source, the catalog, or with the bulk edit feature.

Global Administrator or Request Administrator

Manage how requests are fulfilled

Identity Governance Fulfillment > Configuration.

For information about configuring fulfillment targets, see Configuring Fulfillment.

Global Administrator or Request Administrator

Manage who can request on behalf of others

Requesters tab in appropriate Request Policy.

Global Administrator or Request Administrator

Manage email notifications for request approvals

Notifications section in each approval step of the appropriate Request Approval Policy

Global Administrator or Request Administrator

Create an Access Profile to allow requesting collections of authorizations

Technical role in the catalog added to Request Policy

Global Administrator or Request Administrator

Control approval decision support information

Similarity profile settings in Identity Governance Administration > Role Mining and Analytics Settings.

For information about configuring similarity profile settings, see Configuring Analytics and Role Mining Settings.

Global Administrator or Request Administrator