Request Onboarding

After initiating an onboarding request, Permission Assist walks you through a series of questions. Refer to the sections below for more information about each step.

Who

Question/Option

Description

Enter all the personnel details of who is being onboarded

This area allows you to add essential employee or Identity information.

Field

Description

Maps to the following Active Directory attribute (displayed on the Attribute Editor tab)

Image

Allows you to associate an image with the new Identity. If an image is not uploaded, a default image is assigned.

thumbnailPhoto

First Name (required)

Enter the employee's first name.

givenName

Last Name (required)

Enter the employee's last name.

sn
Type (required)

Select the Identity's type.

Within Permission Assist, Identities can be classified as specific types such as employee, service account, vendor account, and so on. Identity types can be helpful for sorting/searching, and can also used by Permission Assist to create recommendations or filter reviews.

N/A

Description

(optional)

Enter a description or additional information.

description

Company (optional)

This field is used to select the company this employee belongs to, and depending on how your entitlement roles are defined, it may determine which entitlement role(s) the Identity belongs to.

You can add a new company by typing the name of the new company.

To clear this field, hover your cursor over the field and select .

company

Division (optional)

This field is used to define the division this employee belongs to, and depending on how your entitlement roles are defined, it may determine which entitlement role(s) the Identity belongs to.

You can add a new division by typing the name of the new division.

To clear this field, hover your cursor over the field and select .

division

Department (optional)

This field is used to define the department this employee belongs to, and depending on how your entitlement roles are defined, it may determine which entitlement role(s) the Identity belongs to.

You can add a new department by typing the name of the new department.

To clear this field, hover your cursor over the field and select .

department

Office (optional)

This field is used to define the office (or branch) this employee belongs to, and depending on how your entitlement roles are defined, it may determine which entitlement role(s) the Identity belongs to.

You can add a new office by typing the name of the new office.

To clear this field, hover your cursor over the field and select .

physicalDeliveryOfficeName

Supervisor (optional)

This field is used to select the employee's supervisor. This information is also used by Permission Assist. If the Security Team creates a review that includes "Reviewing Supervisors" this field will be used to determine which review items are assigned to each supervisor.

You can add a new supervisor by typing the name of the new supervisor.

To clear this field, hover your cursor over the field and select .

manager

Title (optional)

This field is used to select the employee's job title. Depending on how your entitlement roles are defined, it may determine which entitlement roles(s) the Identity belongs to.

You can create a new job title by typing the name of the job title.

To clear this field, hover your cursor over the field and select .

title

 

Any Additional Instructions or explanation?

This area allows you to add any additional notes, instructions, or comments that may be helpful for the Provision Team as they onboard this new person.

Within this comments area you can:

When all information is complete, select the Request Change button. The request is created.

 

Access

This area is displayed after completing the required information in the "Who" step. The employee's personal information is summarized at the top of the page, and the "Add additional access that has been pre-approved" section is displayed.

Automatic

If the employee matches to an Entitlement Role, this section displays the Entitlement Roles the employee matches to. Any roles displayed in this area will be used to determine the applications and permissions given to this person.

Optional

This area shows additional Entitlement Roles that can be selected.

 

When

This area is displayed after completing the required information in the "Access" step, and allows you to determine when the request will begin.

Question/Option

Description

Immediate

Select this option if you want the onboarding process to be completed as soon as possible.

Scheduled

Select this option if the onboarding process needs to be completed by a date and time in the future. For example, if a new employee has made a commitment to start, but they have to give two weeks notice to their previous employer and would like to start in 3 weeks, you can schedule work to be completed three weeks from today.

After selecting this option, click on the date and time link next to "Needed by" (see example below). Then, select the date and time the work needs to be completed.

Use the slider to select the time the work needs to be completed (see example below).

Provision engineers may be able to start working on this early, based on the number of days in the System Configuration > Taskboards > Personnel Events page.

 

Comment

This area allows you to add any additional notes, instructions, or comments that may be helpful for the Provision Team as they onboard this new person.

Question/Option

Description

Any Additional Instructions or explanation?

Within this comments area you can enter comments and additional information. You can also: