View or change responsibilities¶

The Responsibilities tab is used to assign responsibilities to team members and define who should be notified when specific events happen.

To view the Responsibilities tab, complete the following steps:

1. From the Applications list, select the application you want to view or change. The Applications / Details page appears.

2. Select the Responsibilities tab. This tab allows you to:

   • Add or remove team members from responsibilities
   • Define who receives event notifications, including email notifications and webhooks

Add or remove team members from responsibilities¶

Team members are people who have been added to the application as either an application manager or provision engineer. When an identity is added to a role, they become a team member of that role and are given the responsibilities associated with that role for the specific application. For example, if I add Sarah Jane to the Application Managers role for Active Directory, Sarah Jane is only able to perform application manager duties for Active Directory. She would not be an application manager for other applications unless she was also given responsibilities within those applications.

Select one of the following options for more information about each role:

Add a team member¶

To add a team member, complete the following steps:

1. Point to the type of team member you want to add (Application Managers or Provision Engineers). The Add button appears.

2. Select the Add button.

   

   The "Select who's responsible..." field is displayed.

   

3. Select the Select who's responsible... field and pick an identity from the list. The identity is added and now has responsibility to act as the role to which they were assigned.

   Tip

   You can repeat this step to add additional identities to the role as needed.

   

Remove a team member¶

To remove a team member, complete the following steps:

1. Point to the identity you want to remove.

2. Select the trash bin that appears in the upper right corner.

   

   The identity is removed and no longer has responsibility to act as the role to which they were previously assigned.

Define who receives event notifications¶

Events are moments in time when something happens in Permission Assist, such as the moment an access request is created or the moment an access request moves from an approved status to an assigned status. The Responsibilities tab allows you to define who should receive notifications when an event occurs and what type of notification should be sent.

There are three types of event notifications:

The following events are available:

Add a notification¶

To add an email notification for an event, complete the following steps:

1. Point to an event. The Add button appears.

   

2. Select the Add button and pick Notification from the list.

   

   A new field is displayed and the Application Managers option is selected by default.

   

3. If you want the notification to go to a different team member, select the Application Managers field and pick a different option from the list. Options are organized under the following categories:

   Note

   The following options allow for flexibility in terms of who gets notified when an event occurs, but they do not authorize users to log into Permission Assist and view information they aren't already authorized to view. For example, if you send a department manager a notification when a personnel event is created, but the manager isn't a Personnel Manager, they will get the notification, but will not be able to log into Permission Assist and view the personnel event.

   • Application Specific Roles — roles that have been defined within the application's Responsibilities tab

   • System Authorized Roles — roles that have been defined within System Configuration > System Authentication

     Note

     Administrators cannot receive these types of notifications. They only receive specific notifications related to the administration and configuration of Permission Assist.

   • Access Request Responders — roles that have been defined within System Configuration > Taskboards > Access Requests

   • Other — if the person you want to notify is not in one of the other categories, you can use the options in this category to notify an individual identity or a specific email address

4. (Optional) Select the Include Attachments option to attach a detailed report to the email.

   

   Note

   This can be helpful if you are sending remediation notifications to an internal help desk team that does not have access to Permission Assist. Some events do not have reports that can be attached. This option can be selected even if the event does not have a report to attach; in these cases, the option is ignored.

5. Select the Add button. The person or group is added and will receive a notification when the event occurs. If the Include Attachments option was selected, a paper clip is displayed in the lower right corner.

   

Add a webhook¶

Webhooks allow Permission Assist to send automated notifications to external systems when access request events occur. This is useful for integrating with ticketing systems, automation platforms, or other tools that need to respond to access request activity.

There are two types of webhooks:

• Catch hook — sends an HTTP POST request containing a JSON payload to a specified URL
• System command — runs a command-line program (such as a batch file, PowerShell script, or executable) and passes a callback URL as an argument

Add a catch hook¶

To add a catch hook to an event, complete the following steps:

1. Point to an event. The Add button appears.

2. Select the Add button and pick Catch hook from the list.

3. Enter the URL of the external system that should receive the webhook payload in the Endpoint field.

4. Select the Add button. The catch hook is saved. When the event occurs, Permission Assist sends an HTTP POST request with a JSON payload to the specified URL.

For details about the payload structure and field descriptions, see Webhook payload reference.

Add a system command¶

To add a system command to an event, complete the following steps:

1. Point to an event. The Add button appears.

2. Select the Add button and pick System command from the list.

3. Enter the path to the program you want to run in the Command Path field. This can be a batch file, PowerShell script, or executable.

4. Select the Add button. The system command is saved. When the event occurs, Permission Assist runs the specified program and passes a callback URL as an argument.

Remove a notification or webhook¶

To remove an event notification or webhook, complete the following steps:

1. Point to the item you want to remove.

2. Select the trash bin that appears in the upper right corner.

   

   The item is removed. For notifications, the person or group will no longer receive an email when the event occurs. For webhooks, the external system will no longer receive data when the event occurs.