How to Complete Revocation Work Items

You can confirm that you have completed the requested revocation. Revocation requests are sent after the access review for the associated item is completed and signed off or when the access review enters the challenge phase, if the challenge period feature is active. This process ensures that nothing is removed until the final decision is made on the access review. When you select Complete on this work item, you are stating that you acted on the revocation request.

Required Authorization

You must have authorization on the specified application to perform the required revocation.

Note: A System Administrator or Certification Administrator can also take action on work items.

  1. Navigate to My Work > Work Items to view your current work items.

  2. Select the View button to the right of a revocation work item to display the Manage Work Item page.

  3. Review the work item information in the Summary section.

  4. Review the Comments section for any information associated with this work item.

    Use the Add Comment button to add additional information to the work item if necessary.

  5. Review and perform the operations necessary to revoke the privileges specified. See Making Access Decisions.

    Select a line item to view the details of the revocation request for that item.

    Note: The revocation of application privileges is not performed as part of IdentityIQ. The revocation is performed on the specific application from which the entitlements are to be removed. For information on how to remove entitlements, refer to the documentation associated with the specific application

  6. If this work item was assigned to a workgroup, use the Assign Selected Items button to assign specific revocation requests to members of that workgroup. The name of the workgroup member is displayed in the Assignee column.
    Any member of the workgroup can change the assignee status.

  7. Select the checkmark next to a name, or the checkmark at the top of the column to select all items in the list, then select an action button: Complete, Forward, Save, or Cancel.

    • Select Complete to display the Completion Comments dialog and mark the work item as complete.
      — OR —
      If there are multiple revocation requests in the work item, you can select multiple revocations and use the Mark Revocation Complete button to mark complete. Alternatively, you can click on the revocation item and complete each item individually.

    • Select Forward to forward the selected work item(s) to another user.

    • Save saves any updates you made without completing nor forwarding the work item.

    • Cancel removes any updates and returns you to the prior screen.