Skip to content
Documentation version: IdentityIQ 9.0

Specifying Access Start and End Dates with Time

When you request or approve access to a role or an entitlement, you can specify access start and end dates with time. IdentityIQ provisions and deprovisions access based on those dates.

This allows you to provide time-limited access to sensitive roles and entitlements, roles that are seasonal or temporary, or access that for any reason is intended to have a limited duration, such as a short-term assignment to a different team or a special project.

Note

You can specify access start and end dates in your request only when the Enable Start/End Dates & Times on Role and Entitlement Assignment checkbox is selected at Admin Settings > Global Settings > IdentityIQ Configuration > Roles.

Some roles and entitlements may also require you to specify an end date and time and may also restrict access to them to a maximum duration. For more information, see Configuring Temporary Access for Roles and Configuring Temporary Access for Entitlements.

To specify access start and end dates:

  1. In your access request, on the Set Dates, Finalize and Submit tab, select Set Start/End Date & Time Calendar on the required line item.

    Tip

    To specify the same dates and time for all the line items at once, select Bulk Change Calendar.

  2. In the Set Start/End Date & Time dialog, specify start and end dates with time, and a time zone.

    • By default, your browser's or server's time zone is taken into account.
    • If a maximum access duration is specified for the role or entitlement, you can select start and end dates only within that limit. If you don't specify a start date and time, the current server date and time is taken into account.

  3. Select Save.

The specified dates and times are displayed on the line item.

Note

If you specify a global start / end date on an entire access request and then change the global setting, the new global setting overrides any individual line item date settings you may have made.

Setting Start and End Date Format

You can set a different date format for start date and end date that displays on the Access Request and Access Approval page for roles and entitlements.

Examples of the date format type that you can set are:

  • medium – equivalent to ‘MMM d, y h:mm:ss a’ for en_US locale (e.g. Apr 24, 2024 12:00:00 AM)

  • short – equivalent to ‘M/d/yy h:mm a’ for en_US locale (e.g. 4/18/24 12:00 AM)

  • fullDate – equivalent to ‘EEEE, MMMM d, y’ for en_US locale (e.g. Thursday, May 2, 2024)

  • longDate – equivalent to ‘MMMM d, y’ for en_US locale (e.g. April 17, 2024)

  • mediumDate – equivalent to ‘MMM d, y’ for en_US locale (e.g. Apr 30, 2024)

  • shortDate – equivalent to ‘M/d/yy’ for en_US locale (e.g. 5/10/24)

To set the date format in the Debug pages:

  1. Log in as an IdentityIQ administrator.

  2. Navigate to the Debug pages through the Debug URL: https:///identityiq/debug (for example, http://localhost:8080/identityiq/debug).

  3. From the Configuration Objects dropdown list, select UI Configuration.

  4. Change the date format:

    • Locate uiAccessItemsColumnsRole and set, dateStyle = "" for ColumnConfig having headerKey = "my_approvals_start_date" and headerKey = "my_approvals_end_date".

      This setting changes the start and end date format for roles on the access request page.

    • Locate uiAccessItemsColumnsEntitlement and set, dateStyle = "" for ColumnConfig having headerKey = "my_approvals_start_date" and headerKey = "my_approvals_end_date".

      This setting changes the start and end date format for entitlements on the access request page.

    • Locate uiApprovalItemsColumnsRole and set, dateStyle = "" for ColumnConfig having headerKey = "my_approvals_start_date" and headerKey = "my_approvals_end_date".

      This setting changes the start and end date format for roles on the access approval page.

    • Locate uiApprovalItemsColumnsEntitlement and set, dateStyle = "" for ColumnConfig having headerKey = "my_approvals_start_date" and headerKey = "my_approvals_end_date".

      This setting changes the start and end date format for entitlements on the access approval page.

    • Save your change to the UI Configuration object.