27.4 Disabling the Access Request Service

You can prevent displaying the Access Request pages in Identity Governance by disabling the Access Request service. When you disable the service:

  • All Access Request options are removed from navigation

  • Users with no rights in Identity Governance will not be redirected to Access Request

  • All REST API calls for access request will return errors

  • Users directly accessing the Access Request interface will see the following error message after login: Access request services are disabled. Contact your system administrator.

NOTE:This setting does not affect request and approval polices. Users still will be able to administer and view policies.

To disable the Access Request service:

  1. Start the Identity Governance Configuration utility in console mode.

    • Linux: Default location of /opt/netiq/idm/apps/idgov/bin, then enter ./configutil -console -password database_password

    • Windows: Default location of c:\netiq\idm\apps\idgov\bin, then enter configutil -connsole -password database_password

  2. Check the current status of Access Request:

    config> dc com.netiq.iac.access.request.enabled

  3. Disable the Access Request service:

    config> sp com.netiq.iac.access.request.enabled false

  4. Exit the console and restart tomcat.