Request role transition¶
When an employee is moving from one job title or position to another, a role transition request ensures that their access is updated to match their new role. Permission Assist compares the old and new roles to determine which applications need to be added, changed, or removed.
Note
Before you begin, you must initiate a personnel event, select Role Transition, and then select Start.
Step 1 — Select the employee¶
-
In the Who is transitioning roles? field, select the employee who is changing roles.
Tip
Start typing the name of the employee to filter the list.
-
Select the Continue button. The "When does the transition period start?" section is displayed.
Step 2 — Choose when to start¶
-
Select one of the following options:
Option Description Immediate Select this option to start the transition as soon as possible Scheduled Select this option to schedule the transition for a future date and time. After selecting this option, select the date and time link next to Needed by, then select the date and time the work needs to be completed. Use the slider to select the time (see example below)

-
Select the Continue button. The "Will overlapping access be required...?" section is displayed.
Step 3 — Define the overlap period¶
If the employee will be transitioning to their new position over time, you can define a period of overlap where the employee keeps both their old and new permissions.
-
Select one of the following options:
Option Description No Select this option if the employee can immediately transition to the new position. Their old permissions will be removed and new permissions will be added at the same time. Yes Select this option if the employee needs both their current and new permissions for a period of time while transitioning. After selecting this option, select the date and time link next to Needed by, then select the date and time the overlap period ends. Use the slider to select the time. -
Select the Continue button. The "Indicate the changes..." section is displayed.
Step 4 — Update the employee's information¶
The employee's current information is displayed. Update any fields that are changing as part of this role transition. For example, if the employee is moving to a new department or receiving a new job title, update those fields here.
-
Update the fields that are changing. See the identity detail fields below for a description of each field.
Tip
The fields you change here (such as department, title, and office) determine which access models Permission Assist matches in the next step. Make sure these reflect the employee's new role.
-
Select the Continue button. The access models section is displayed.
Step 5 — Review the access models¶
A summary of changes to the employee's information is displayed near the top of the page, and the access model matching section is displayed below.
-
Review the Automatic section. If the employee's updated information matches one or more access models, the matched access models are displayed here. These are included by default and determine the applications and permissions for the new role.
-
(Optional) Review the Optional section. If additional access models are available, you can select any that apply to the employee's new role.
-
Select the Continue button. The "Any additional instructions or explanation?" section is displayed.
Step 6 — Add comments and submit¶
-
(Optional) In the comment area, enter any additional notes or instructions that may be helpful for the Provision Team as they transition this person's access. You can also add attachments to comments and use @mentions to send email notifications to other Personnel Managers, Security Team, or Provision Team members.
-
Select the Continue button.
- Verify the information.
- Select the Submit button. The offboarding request is created.
Identity detail fields¶
| Field | Description |
|---|---|
| Image | Associates a new image with the identity |
| First Name (required) | The employee's first name |
| Last Name (required) | The employee's last name |
| Type (required) | The identity type. Select a new type if the role transition requires it. Identities can be classified as specific types such as employee, service account, vendor account, and so on. Identity types can be helpful for sorting and searching, and can also be used by Permission Assist to create recommendations or filter reviews |
| Description (optional) | A description or additional information about the employee |
| Company (optional) | The company this employee belongs to. If the role transition moves the employee to another company, select the Company field and pick the new company from the list. Depending on how your access models are defined, this may determine which access models the identity is enrolled in. You can add a new company by typing the name. To clear this field, hover over the field and select the Delete button |
| Division (optional) | The division this employee belongs to. Depending on how your access models are defined, this may determine which access models the identity is enrolled in. You can add a new division by typing the name. To clear this field, hover over the field and select the Delete button |
| Department (optional) | The department this employee belongs to. Depending on how your access models are defined, this may determine which access models the identity is enrolled in. You can add a new department by typing the name. To clear this field, hover over the field and select the Delete button |
| Office (optional) | The office or branch this employee belongs to. Depending on how your access models are defined, this may determine which access models the identity is enrolled in. You can add a new office by typing the name. To clear this field, hover over the field and select the Delete button |
| Title (optional) | The employee's job title. Depending on how your access models are defined, this may determine which access models the identity is enrolled in. You can add a new job title by typing the name. To clear this field, hover over the field and select the Delete button |
| Supervisor (optional) | The employee's supervisor. If the Security Team creates a review that includes reviewing supervisors, this field determines which review items are assigned to each supervisor. You can add a new supervisor by typing the name. To clear this field, hover over the field and select the Delete button |
| Additional fields (optional) | If your organization has enabled additional fields in System Configuration > Identities, those fields appear here. You can update any that are changing as part of this role transition. |
What happens next¶
After the role transition request is created, it moves through the personnel event workflow. An authorized person must approve the request. After the event is approved, it moves to the provision stage where Permission Assist automatically creates access requests for the Provision Team. Depending on the transition, these may include requests to add access for new applications, change permissions for applications the employee keeps, and remove access for applications that are no longer needed. For more information, see How personnel events work.
Related topics:
- Initiate a personnel event
- Change the scheduled start date of a personnel event
- Add attachments to comments
- Use @mentions to send email notifications