Request Role Transition

Role transitions are used when a person is moving from one job title to another. After initiating a role transition, Permission Assist walks you through a series of questions. Refer to the sections below for more information about each step.

Who

Question/Option

Description

Who is transitioning roles?

Select the employee who is leaving the organization.

Tip: If you start typing the name of the employee, the list is filtered and easier to find within the list.

 

When

This area is displayed after completing the required information in the "Who" step, and allows you to determine when the request will begin.

Question/Option

Description

When does this transition period start?

Select one of the following options.

Option Description
Immediate Select this option if you want the transition period to start as soon as possible.
Scheduled

Select this option if the transition process can be begin on a future day/time.

After selecting this option, click on the date and time link next to "Needed by" (see example below). Then, select the date and time the work needs to be completed.

Use the slider to select the time the work needs to be completed (see example below).

 

 

Overlap

This area is displayed after completing the required information in the "When" step. If the employee will be transitioning to a new position over time, this area allows you to define the period of time of overlap (where the employee will need both their old and new permissions).

Question/Option

Description

Will overlapping access be required for a period of time?

Select one of the following options.

Option Description
No Select this option if the employee can immediately transition to the new job title/position.
Yes

Select this option if the employee will need to have both their current and new permissions for a period of time while they are transitioning to the new job title/position.

After selecting this option, click on the date and time link next to "Needed by" (see example below). Then, select the date and time the work needs to be completed.

Use the slider to select the time the work needs to be completed (see example below).

 

User

This area is displayed after completing the required information in the "Overlap" step, and allows you to make the appropriate changes to the employee's information.

Question/Option

Description

Indicate the changes the role transition will create by making the appropriate edits.

This area allows you to change the appropriate employee/Identity information.

Field

Description

 Maps to the following Active Directory attribute (displayed on the Attribute Editor tab)

Image

Allows you to associate a new image with the Identity.

thumbnailPhoto

First Name (required)

Displays the employee's first name.

givenName

Last Name (required)

Displays the employee's last name.

sn
Type (required)

Displays the Identity's current type. Select a new type if needed.

Within Permission Assist, Identities can be classified as specific types such as employee, service account, vendor account, and so on. Identity types can be helpful for sorting/searching, and can also used by Permission Assist to create recommendations or filter reviews.

 N/A

Description

(optional)

Provides a description or additional information.

 description

Company (optional)

This field is used to select the company this employee belongs to, and depending on how your entitlement roles are defined, it may determine which entitlement role(s) the Identity belongs to.

If the employee's role transition will move them to another company, select the Company field and pick a new company from the list.

You can add a new company by typing the name of the new company.

To clear this field, hover your cursor over the field and select .

 company

Division (optional)

This field is used to define the division this employee belongs to, and depending on how your entitlement roles are defined, it may determine which entitlement role(s) the Identity belongs to.

You can add a new division by typing the name of the new division.

To clear this field, hover your cursor over the field and select .

 division

Department (optional)

This field is used to define the department this employee belongs to, and depending on how your entitlement roles are defined, it may determine which entitlement role(s) the Identity belongs to.

You can add a new department by typing the name of the new department.

To clear this field, hover your cursor over the field and select .

 department

Office (optional)

This field is used to define the office (or branch) this employee belongs to, and depending on how your entitlement roles are defined, it may determine which entitlement role(s) the Identity belongs to.

You can add a new office by typing the name of the new office.

To clear this field, hover your cursor over the field and select .

 physicalDeliveryOfficeName
Title (optional)

This field is used to select the employee's job title. Depending on how your entitlement roles are defined, it may determine which entitlement roles(s) the Identity belongs to.

You can create a new job title by typing the name of the job title.

To clear this field, hover your cursor over the field and select .

 title

Supervisor (optional)

This field is used to select the employee's supervisor. This information is also used by Permission Assist. If the Security Team creates a review that includes "Reviewing Supervisors" this field will be used to determine which review items are assigned to each supervisor.

You can add a new supervisor by typing the name of the new supervisor.

To clear this field, hover your cursor over the field and select .

 manager

 

 

Access

This area is displayed after completing the required information in the "User" step. A summary of changes to the employee's personal information is displayed near the top of this area, and the "Add additional access that has been pre-approved" section is displayed below the changes.

Automatic

If the employee matches to an Entitlement Role, this section displays the Entitlement Roles the employee matches to. Any roles displayed in this area will be used to determine the applications and permissions given to this person.

Optional

This area shows additional Entitlement Roles that can be selected.

 

Comment

This area allows you to add any additional notes, instructions, or comments that may be helpful for the Provision Team as they transition this new person.

Any Additional Instructions or explanation?

Within this comments area you can enter comments and additional information. You can also: