25.4 Approving Access Requests

If the Access Request policy specifies you as an approver for requests, you might have to approve requested items. Your Access Request administrators define these policies and specify items as needing further approval. Approval for technical role requests will display a single approval for the role if the Access Request Approval policy is configured for role level approval. Approving a role with role level approval, approves all permission requests associated with the role. If the approval policy is configured for permission level approval, approval requests will be generated for each permission the user does not hold. Those permissions will need to be approved individually.

Some administrators require business role members, a person’s supervisor, or an application owner to approve requested items, and some items might require multiple approvers. In these situations, you must approve items before the next designated approver receives them.

  1. In the Request interface, select Approvals.

  2. Select a request item on the left to display the details on the right. A request can contain more than one requested item.

  3. (Optional) Select a requested item to see details about the request, including information that might be helpful in making a decision.

    NOTE:By default, Identity Governance enables decision support information, including business role authorization status. If you do not use business roles, and if you are also an administrator, you can disable the status display by deselecting the Administration > Analytics and Role Mining Settings > Show business role authorization status option.

  4. Select Approve or Deny for each requested item.

  5. Select Confirm approval to submit your approval.