# Adding Attachments to Access Requests

You can add attachments to access request items using the **Attachments** icon ![attachment](../../img/attach_files_icon.png). Depending on your system configuration, attachments may be optional or required for specific items. See [Attachment Settings](../../system_configuration/identityiq_global_settings/identityiq_configuration/miscellaneous.md#attachment-settings).

Attachments are only available for single-user access requests. If attachments are enabled, you will see the attachment icon on all request items, but it will only be active on requests that support attachments.

To add an attachment to an access request:

1. On the **Finalize and Submit** or **Set Dates, Finalize and Submit** tab, select the **Attachments** icon ![attachment](../../img/attach_files_icon.png) for the access item.

2. In the attachments overlay, add attachments by dragging and dropping or uploading files.

Once you've added an attachment, you have the option to add a description, download the attachment, or delete the attachment. You can also add more attachments to the request.

3. Select **OK** after all files are uploaded.

If you try to add an attachment for a file type that is not supported, or that exceeds the maximum file size that was configured for attachments, you will see an error.

**Supported File Types**: Your IdentityIQ system administrator can configure what types of file attachments are supported; for example, PDF documents, text files, JPG images, etc.

!!! caution
     IdentityIQ does not perform file content validation or verification on attachments. It is your responsibility to ensure that only files that do not violate security policies within your environment are included as attachments.

**File Size Limits**: There may be an attachment size limit set during the configuration of IdentityIQ. If you run into issues, contact your system administrator. For information how file attachment options are configured, see [Attachment Settings](../../system_configuration/identityiq_global_settings/identityiq_configuration/miscellaneous.md#attachment-settings).

**Required Attachments**: IdentityIQ can be configured to make attachments required for access requests. If attachments are required, it will be indicated on the icon and you will receive a warning if you try to submit the request without an attachment.

**Attachments for Specific Roles**: Attachments are added to individual access request items, and can also be added for specific roles that may be included with the access request item.

**Single-Identity Requests Only**: Attachments cannot be added to requests for multiple identities. They can be added only to single-identity requests.

!!! note
      Adding any attachment will fulfill the required attachment rules. IdentityIQ does not validate to ensure the correct item was attached. If attachments are required for an item and you include that item in a request for multiple users, a message is displayed instructing you to amend the request as required.

## Attachments Overlay

The information displayed on the attachment overlay is controlled using **AttachmentConfig** rules. Every time a user accesses the **Finalize and Submit** or **Set Dates, Finalize and Submit** tab of an access request, every **AttachmentConfig** rule is reviewed and the attachment overlay is constructed based on that input, possibly with the names of required or suggested attachments displayed in a list.

Required attachment names are displayed with a red asterisk. All required attachments should be included in the access request, but any attachment will satisfy the requirement rules. IdentityIQ does not validate the attached files.

Drag and drop or upload the attachments to add them to the **Attached to This Item** list.

The **Attached to This Item** list contains any files already attached to this request item. From this list you can:

- Add or edit comments

- Download and view the attachment

- Remove the attachment from the request and delete it from the database

## Viewing Attachments when Approving Requests

When an Access Request item includes file attachments, the reviewer sees a green attachment icon indicating the presence and number of attachments. The reviewer can select the icon to download and view the attachment. IdentityIQ does not have any built-in viewers; in order to open and view an attachment, the user must have the appropriate application installed (for example, Adobe Acrobat or similar, to open and view a PDF attachment).

Adding Attachments to Access Requests

You can add attachments to access request items using the Attachments icon . Depending on your system configuration, attachments may be optional or required for specific items. See Attachment Settings.

Attachments are only available for single-user access requests. If attachments are enabled, you will see the attachment icon on all request items, but it will only be active on requests that support attachments.

To add an attachment to an access request:

On the Finalize and Submit or Set Dates, Finalize and Submit tab, select the Attachments icon for the access item.
In the attachments overlay, add attachments by dragging and dropping or uploading files.

Once you've added an attachment, you have the option to add a description, download the attachment, or delete the attachment. You can also add more attachments to the request.
Select OK after all files are uploaded.

If you try to add an attachment for a file type that is not supported, or that exceeds the maximum file size that was configured for attachments, you will see an error.

Supported File Types: Your IdentityIQ system administrator can configure what types of file attachments are supported; for example, PDF documents, text files, JPG images, etc.

Caution

IdentityIQ does not perform file content validation or verification on attachments. It is your responsibility to ensure that only files that do not violate security policies within your environment are included as attachments.

File Size Limits: There may be an attachment size limit set during the configuration of IdentityIQ. If you run into issues, contact your system administrator. For information how file attachment options are configured, see Attachment Settings.

Required Attachments: IdentityIQ can be configured to make attachments required for access requests. If attachments are required, it will be indicated on the icon and you will receive a warning if you try to submit the request without an attachment.

Attachments for Specific Roles: Attachments are added to individual access request items, and can also be added for specific roles that may be included with the access request item.

Single-Identity Requests Only: Attachments cannot be added to requests for multiple identities. They can be added only to single-identity requests.

Note

Adding any attachment will fulfill the required attachment rules. IdentityIQ does not validate to ensure the correct item was attached. If attachments are required for an item and you include that item in a request for multiple users, a message is displayed instructing you to amend the request as required.

Attachments Overlay

The information displayed on the attachment overlay is controlled using AttachmentConfig rules. Every time a user accesses the Finalize and Submit or Set Dates, Finalize and Submit tab of an access request, every AttachmentConfig rule is reviewed and the attachment overlay is constructed based on that input, possibly with the names of required or suggested attachments displayed in a list.

Required attachment names are displayed with a red asterisk. All required attachments should be included in the access request, but any attachment will satisfy the requirement rules. IdentityIQ does not validate the attached files.

Drag and drop or upload the attachments to add them to the Attached to This Item list.

The Attached to This Item list contains any files already attached to this request item. From this list you can:

Add or edit comments
Download and view the attachment
Remove the attachment from the request and delete it from the database

Viewing Attachments when Approving Requests

When an Access Request item includes file attachments, the reviewer sees a green attachment icon indicating the presence and number of attachments. The reviewer can select the icon to download and view the attachment. IdentityIQ does not have any built-in viewers; in order to open and view an attachment, the user must have the appropriate application installed (for example, Adobe Acrobat or similar, to open and view a PDF attachment).