Permission Assist 6.5 Release Notes¶

Permission Assist 6.5 introduces API-driven automation for your IAM workflows, enabling your team to automate Personnel Event creation and data imports from existing tools — eliminating manual data entry and increasing the reliability of your IAM processes. This release also brings expanded operational control, including integration health monitoring, enhanced provisioning audit reporting, and simplified email configuration.

New features¶

API¶

• Added the Permission Assist REST API. External systems such as HRIS platforms, ticketing systems, and automation tools can now integrate directly with Permission Assist. The API allows you to create personnel events (onboarding, offboarding, role transition, and leave of absence) and trigger application imports on-demand. Events created through the API enter the same workflow as manually created events. For more information, refer to the API documentation.

Personnel Events¶

• Added configurable approval and verification rules for personnel events. Administrators can now define which organizational roles — such as Supervisors, Personnel Managers, Defined Managers, or Security Team members — must approve or verify each personnel event type before provisioning begins. Multiple approvers can each provide their decision independently, and the step advances only when all required responses are received. For more information, see Taskboards - Personnel events and Approve or verify a personnel event.

• Added the ability to edit pending onboarding and role transition events. Before an event is approved, Personnel Managers can now update identity details, organization information, profile photos, and access model selections directly from the event detail page. All edits are recorded in the event's history. For more information, see Edit a pending onboarding event and Edit a pending role transition event.

Reports¶

• Added the Custom Audit Package report for personnel events. When your examiner asks "show me your provisioning activity for the past quarter," you can generate a single report that covers everything — no more assembling individual event records. The Custom Audit Package report allows you to generate a comprehensive audit package across multiple personnel events by selecting a date range and choosing which event types to include. The report is downloaded as a ZIP file containing individual event details, access request details, file attachments, and an Audit Package Summary overview. The report is available under Reports > Personnel Events. For more information, refer to Custom Audit Package.

Improvements¶

Personnel Events¶

• Modified the ability to adjust application scope during personnel event approval. The personnel event reporter and the event assignee can now also select which applications to include before the Approve step is completed. Approvers can also select applications as they have in previous versions. Every adjustment requires explicit confirmation and is recorded in the event's activity log with a summary of added and removed applications. For more information, see Approve or verify a personnel event.

Reports¶

• Updated personnel event reports to include approval and verification history. The Personnel Event Details report now includes approval and verification history for each milestone. The Personnel Event Audit Package report includes the complete approval and verification history as part of the full audit trail. For more information, see Generate a detailed personnel event report and Generate a personnel event audit package.

System Configuration¶

• Updated SMTP configuration. The email delivery infrastructure has been updated and setup has been simplified — SMTP connection details no longer need to be manually configured. Permission Assist now handles email delivery automatically, which helps address compatibility issues with modern SMTP servers, including the deprecation of basic authentication in Microsoft Exchange. Administrators can enable or disable email notifications and test the configuration from the SMTP tab in the System Configuration > General Settings area.

  Note

  The Permission Assist web application server must be able to connect to *.continuous.com for email delivery to function. If your network or firewall rules do not already allow this outbound connection, you will need to update them before email notifications can be sent from Permission Assist.

• Added System Connectivity. Administrators can now view the connection status of all configured integrations — including applications, directory source connectors, and platform services — from the Help menu by selecting System Connectivity. Each integration displays its last connection attempt, whether it succeeded, and any error details if it failed. For more information, see System Connectivity.

• Added the Software Bill of Materials (SBOM) download. Administrators can now download a machine-readable inventory of all third-party libraries included in Permission Assist directly from the Help menu by selecting About Permission Assist. The SBOM is available in SPDX 2.3 and CycloneDX 1.5 formats for use with vulnerability management and compliance tooling. For more information, see Software Bill of Materials (SBOM).