25.3 Requesting Access and Viewing Timeline

Under Request, you can:

  • View and refresh a list of your requests, their current status, and a timeline showing details of the request, approval, and fulfillment events

    NOTE:Select the Refresh icon next to My Requests to refresh the status. Do not refresh the browser as it might lead to an error condition or require you to log in again. Additional administrator actions might also be required for the status to be updated.

  • View recommended items and request application access, application permission, or a technical role assignment for yourself or for a user for whom you are authorized to request permissions

  • Browse and request application access, application permission, or a technical role for you or a user for whom you are authorized to request permissions

NOTE:Dynamic resources, a specific type of permission, might require additional input. For example, if the dynamic resource is a phone, you might have to select a phone model.

To view a list of your requests, their status, and timeline:

  1. Select Request > My Requests.

    HINT:Requests that violate SoD policies have a warning icon next to the request name. Click the icon to view violated SoD policies.

  2. (Optional) Use Search to filter the requests and the page control (if shown) to page through them.

  3. Select a request item status to view and collapse the timeline of underlying events associated with the request, including fulfillment information.

    NOTE:Identity Governance updates the request fulfillment status when fulfillers fulfill a request, and when the application or a data or global administrator collects and publishes the application data source. For example, after a request is manually fulfilled, the fulfilled waiting verification status on the request timeline will change to verified only after a collection and publication.

If the Identity Governance administrators have created and assigned business roles in your environment, you might see recommended items to request. You can also browse other items that you can request for yourself or others.

To request items:

  1. Select Request > Recommended.

  2. (Optional) Use Search to filter the recommended items and the page control (if shown) to page through them.

    NOTE:Business role assignments determine these recommended items. If in your environment, Identity Governance administrators have not created and assigned business roles, you might not see any recommended items to request.

  3. (Conditional) If there are recommended items, such as applications or technical roles, select an item, enter a reason, and select Add to request. Repeat this to add more items.

  4. (Conditional) If you have rights to request on behalf of others:

    1. Select the current user to change who you are requesting for.

    2. Select an item, enter a reason, and select Add to request. Repeat this to add more items.

    3. (Optional) Select a different user to review and request items for that user.

  5. Select Request > Browse.

  6. On the Applications tab, select an application to expand the items to request.

  7. Select the application to request login access to the application or select individual permissions, review SoD violations, if any, enter a reason, and select Add to request.

    NOTE:If Identity Governance warns you of SoD violations, either change your request to resolve the violation or submit the request with the violations for an SoD administrator, SoD policy owner, or an SoD or Access Request policy to approve or resolve the violation.

  8. On the Technical Roles tab, select a technical role to request multiple permissions in a single step, enter a reason, and select Add to request.

    When you request access to a technical role, Identity Governance will generate requests for the missing permissions of the technical role and also assign the technical role to the user. The badges that display the technical roles will display a green check mark icon if the technical role is already assigned and a yellow warning icon if the technical role is assigned to the user, but the user is missing one or more permissions of the technical role.

  9. (Optional) Select a different user to review and request items for that user.

  10. After you have requested items for all users, select the cart to submit your choices.

    NOTE:Selecting X next to a request in the shopping cart immediately removes the request from the cart, but does not submit the request.

When you review permissions available to request, items have the following icons signifying the state of the item:

Shopping cart

Item was requested and is in the shopping cart, but the request has not yet been submitted.

Lock

Requested item needs approval.

Clock

Item was requested and is awaiting fulfillment or approval.

Check mark

User already owns the item.