Access request details page¶
After selecting an access request in the Change Management Taskboard, the details page for that access request is displayed.
Info tab¶
The Info tab displays detailed information about the access request such as who reported the issue, who is assigned to the request, change controls and their status, and more.
| Field/Option | Description |
|---|---|
| Status | Displays the status of the request. See the status descriptions below |
| Summary | Provides a summary of the request |
| Reporter | Displays the name of the person who created the request |
| Assignee | Displays the name of the Provision Team member assigned to the request. To quickly assign yourself, select the Assign to me link |
| Affected Identity | Provides detailed information about the identity associated with the request, including name, status, type, supervisor, and more. This section is displayed for access requests, offboarding events, leaves of absence, and role transitions |
Status descriptions¶
| Status | Description |
|---|---|
| Needs Approval | The request requires pre-approval. The Responses area on the right side of the page displays the required change controls and which roles are required to pre-approve |
| Provisioning | The request has been approved (if pre-approval is required) and is ready for provisioning. To take action on the request, select the I Resolved button. If the button is not displayed, you do not have authorization to resolve the request |
| Verifying | The request has been resolved but still needs to be verified. To take action on the request, select the I Verified button |
| Scheduled | The request has been approved (if pre-approval is required) but is scheduled to occur on a future date |
| Snoozed | Applies only to the Restore step of leaves of absence. The Suspend step has been completed, but the return date is still unknown. The restore step is paused until a future date is set or the request is manually resumed |
| Completed | The request has been resolved and verification was completed (if required). No more actions need to be taken |
| Canceled | The request was canceled before it could be completed |
Change controls¶
The right side of the page provides an overall view of the controls required to complete the request.
Standard controls include approval, provision or deprovision actions (which can include transition in, transition out, suspend, or restore actions), and verification. Administrators can define rules for these workflows in System Configuration > Taskboards > Access Requests > Workflow tab.
Details tab¶
The Details tab provides the details of the changes that need to be made according to the request.
| Field/Option | Description |
|---|---|
| User | Displays detailed information about the application user account associated with the access request. For personnel events, it may also display requested changes |
| Applicable or Chosen Enrollments | Displays the access models associated with the affected identity |
| Requested Privilege Changes | Displays a list of privileges associated with this request along with the changes requested by the reporter. See the column descriptions below |
Requested privilege changes columns¶
| Column | Description |
|---|---|
| Initial | The permissions the user account had when the review started (for remediation requests) or when the personnel event was created. These permissions do not change once the review is started |
| Now | The permissions the user account has as of the most recent import. These permissions are updated as new application data is imported, so you can use this column along with the Approved and Action columns to verify that changes were made correctly |
| Approved | Whether the user account should have access to the permission based on their access model |
| Action | The action being requested. An Add indicator means the request is to add permission. A Remove indicator means the request is to remove permission |
Provisioning tab¶
The Provisioning tab displays detailed instructions about how to make the changes required by the access request or personnel event. If the application is integrated with Permission Assist using a read/write connector, you can use Permission Assist to automate the process of making the application changes.
Comments tab¶
The Comments tab displays comments that have been added to the request. Typically, comments are used to document the reason for resolving a request or to communicate between the Provision Engineer and the reviewer. If a request was created as part of the review process, the comments added by the reviewer are included when the access request is created.
Note
Comments are saved for historical and auditing purposes and cannot be edited or removed after they have been added.
To add a comment, select the Add a comment link. The Add Comment window is displayed, allowing you to enter a comment and upload attachments or supporting documentation as needed.
Activity tab¶
The Activity tab displays all actions taken on the request (for example, system actions or reviewer actions to approve, flag, or reassign) recorded for historical and auditing purposes.
Actions¶
The Actions (...) button in the upper right corner of the page provides additional options for working with access requests:
- Assign an access request
- Add a responder
- Add a comment
- Use @mentions to send email notifications
- Reopen provisioning
- Cancel a request