Adding Attachments to Access Requests

You can add attachments to access request items using the attachments (paper clip) icon. Based on how your system is configured, you may have the option to add attachments, or you may be required to add an attachment for specific items. See Configuring Attachments for Access Requests.

Attachments are only available for single user access requests. If attachments are enabled, you will see the attachment icon on all request items, but it will only be active on requests that support attachments.

To add an attachment to an access request:

  1. On the Review and Submit tab, select the attachments icon (paper clip) for the request item.

  2. In the attachments overlay, add attachments by dragging and dropping or uploading files.

    Once you've added an attachment, you have the option to add a description, download the attachment, or delete the attachment. You can also add more attachments to the request.

  3. Select OK after all files are loaded.

If you try to add an attachment for a file type that is not supported, or that exceeds the maximum file size that was configured for attachments, you will see an error.

Supported File Types: Your IdentityIQ system administrator can configure what types of file attachments are supported; for example, PDF documents, text files, JPG images, etc.

Caution: IdentityIQ does not perform file content validation or verification on attachments. It is your responsibility to ensure that only files that do not violate security policies within your environment are included as attachments.

File Size Limits: There may be an attachment size limit set during the configuration of IdentityIQ. If you run into issues, contact your system administrator. For information how file attachment options are configured, see Enabling File Attachments.

Required Attachments: IdentityIQ can be configured to make attachments required for access requests. If attachments are required, it will be indicated on the icon and you will receive a warning if you try to submit the request with out an attachment.

Attachments for Specific Roles: Attachments are added to individual access request items, and can also be added for specific roles that may be included with the access request item.

Single-Identity Requests Only: Note that attachments can NOT be added to requests that encompass multiple identities; they can be added for single-identity requests only.

Note: Adding any attachment will fulfill the required attachment rules. IdentityIQ does not validate to ensure the correct item was attached. If attachments are required for an item and you include that item in a request for multiple users, a message is displayed instructing you to amend the request as required.

The information displayed on the attachment overlay is controlled using AttachmentConfig rules. Every time a user accesses the Review and Submit tab of an access request, every AttachmentConfig rule is reviewed and the attachment overlay is constructed based on that input, possibly with the names of required or suggested attachments displayed in a list.

Required attachment names are displayed with a red asterisk. All required attachments should be included in the access request, but any attachment will satisfy the requirement rules. IdentityIQ does not validate the attached files.

Drag and drop or upload the attachments to add them to the Attached to This Item list.

The Attached to This Item list contains any files already attached to this request item. From this list you can:

  • Add or edit comments – click the pencil icon to add or edit comments

  • Download and view – download and view the attachment

  • Remove – remove the attachment from the request and delete it from the database

When an Access Request item includes file attachments, the reviewer sees a green attachment icon indicating the presence and number of attachments. The reviewer can click the icon to download and view the attachment. IdentityIQ does not have any built-in viewers; in order to open and view an attachment, the user must have the appropriate application installed (for example, Adobe Acrobat or similar, to open and view a PDF attachment).