Creating an Access Request Template

To create an Access Request template, perform the following steps:

  1. In the administrative client, navigate to Permissions > Access Requests > Configuration > Manage Access Requests Templates.

  2. Click New.

    The Access Request Template displays.

  3. Type a unique name in the Name field.

  4. Select a review process from the Review Process dropdown menu.

  5. Select the applications/identity collectors in the available fields list to be moved to the Chosen list, using > or >.

    Note: The available objects depend upon the selected review process. A static identity collector review process will display all applications/identity collectors, while a dynamic one will display the identity collector, itself, or will only display applications associated with the review process identity collector. A dynamic application review process will display only the selected application.
    This section includes the list of applications and identity collectors included in this template (updated according to the selected review process).

    Application and Identity Collectors can only be associated with one access request template.

    Applications and identity collectors that are already associated with an access request templates do not display in the list of available objects.

    6. Maximum Duration

    is the maximum time for management of an access request, after which the system highlights the request to indicate an expired duration.

    Fulfillment

    adds a fulfillment step for the permissions to the access request. Section Access Fulfillment has additional information on access fulfillment.

    Select the fulfillment method:

    None

    The access request will end after the last reviewer in the review process has reviewed all the request permissions, without a fulfillment step.

    Fulfill Access Requests

    The review step will be followed by a fulfillment step, depending on the business resource type and manual fulfillment type selected:

    • Managed BRs

      Fulfillment is handled automatically by File Access Manager.

    • Unmanaged BRs

      Selecting File Access Requests will open a drop down list to select the Manual Fulfillment Review Process – a one-step review process defining the user or group who will be responsible for the fulfillment process.

      Note: If selecting Fulfillment, Bypass review process when a Data Owner issues a Revoke request will display. If this option is selected, an additional review process will not be triggered if a data owner directly revokes access from a user on this resource.

    Custom Script

    The review step will be followed by a fulfillment step, depending on the business resource type and manual fulfillment type selected:

    • Managed BRs

      Fulfillment is handled automatically by File Access Manager.

    • Unmanaged BRs

      Fulfillment is handled by a script prepared by the user. See Access Fulfillment for Unmanaged BRs for a full description of fulfillment using a user script.

      Note: The system only displays single-level review processes.

  6. Click Next.

    The Review Data Fields window displays.

    Note: The Reviewer Data Fields display what the reviewer will see when reviewing permissions. All built-in fields display, and the relevant Identity Collector fields do not display if you selected an Identity Collector.

  7. Select the fields in the Available Date Fields to be moved to the Review Data Fields list, using > or >.

  8. Select a field, and use the up and down arrow keys above the Review Data Fields list to change the order of the Reviewer Data fields.

    The fields will display to the user in the order selected in the Reviewer Data Fields list.

  9. Check the Display the same fields in the File Access Manager clientcheck box to display the same fields in the administrative client as display in the Web interface.

    Note: The administrator may want to provide the user of the Web interface with fewer fields if it is not necessary for the user to view all the fields.

  10. Click Finish (only if you checked the check box). This will appear in the web client at My Tasks > Access Request on the web application.

  11. If you do not check Display the same fields in the File Access Manager client, the Administrators Data Fields window displays, so the administrator can select a list of data fields that differ from the list of the Reviewer Data Fields.

  12. Click Finish.