Requesting Access

Based on how your system is configured, you can:

This option must be configured on the Lifecycle Manager configuration page. Access it via the Quicklink Manage User Access menu item or card on the home page.

  1. On the Select User tab, select the checkmark icon on the card for one or more identities.

    1. To search for an identity, enter the name or first few letters of an identity in the search box and click the Search icon. To limit the number of listings, select Filters, choose specific filter criteria, and then select Apply.

    2. Select the checkmark icon to choose one or more identities. You can also select the All button to select all identities (maximum of 100).

    3. The Users Selected list just below the navigation bar shows the users you have selected; you can click on this list of users at any point in the access request process to remove users from the selection.

    4. Select the person icon on any user card to see details about that identity.

  2. Select Next to move on to the Manage Access page.

  3. On the Manage Access page, select the Add Access tab.

  4. Click Browse all access items to display the full list of access options available. To search, select either Search by Keywords, Find Users' Access, or Filter Population from the dropdown options.

    • Search by Keywords – enter a search term and select the search icon or select Browse Access to see a full list of roles and entitlements. The specifics of which attributes can be searchable is configured by your system administrator.

    • Find Users' Access – select a user from the dropdown options to see access granted to that identity so you can choose items from that set of access and request those items for the identities in your selection. If you search on multiple users, the search results show the number and percentage of users that have each type of access. Note that is a configurable option that may not be enabled in your particular installation.

    • Filter Population – filter by a number of configurable options such as Manager, Region, Department, Location, or Job Title to find users and see the access granted to them. Results are shown in groups that include a notification about what percentage of the given population the role or entitlement applies to. Select a percentage notification for details. Note that is a configurable option that may not be enabled in your particular installation.

  5. Alternately, click Filters to limit the number of listings using various filtering options, including Role Source Application, Role Source Attribute, Role Classification, Entitlement Application, Entitlement Attribute, and more. After choosing your filter criteria, select Apply to see search results.

    • The Filter button turns green when filtering is applied to alert you that you are seeing a filtered subset of access. To clear filtering, select the Filters button again and select Clear.

  6. From the listed results, select the checkmark icon for each access item you want to add.

    • When you select a role that permits additional roles, you are alerted that additional, optional roles are available and can select any of them to add to the request.

  7. After IdentityIQ validates that the user does not currently have the requested access, the number of items you selected displays on the Add Access tab.

  8. Select Next to move on to Review and Submit.

    • A pop-up message notifies you if conflicting changes have been requested.

  9. Review access request information and verify your choices. Based on how your system is configured, before you complete the access request you may:

    • Remove an access request entry – select the X icon next to the access item.

    • Add an attachment (for single user requests only) – if your configuration allows, you may add attachments by selecting the paper clip icon. See Adding Attachments to Access Requests.

    • Add a comment – if your configuration allows, you may add a comment to your request by selecting the comments icon to the right. Your system may be configured to required comments, in which case the Comment icon is flagged with a red asterisk. See Viewing and Posting Comments.

    • Change the priority – see Editing an Access Request

    • Change the sunrise / sunset dates – see Editing an Access Request .

  10. Select Submit. After you click Submit, forms are issued if further information is needed before your request can be completed.

    • If you are requesting access for a single identity, a pop-up displays enabling you to complete the form immediately or send it to your Home page.

    • If you are requesting access for multiple identities, the forms are sent directly to your Home page and no pop-up is displayed.

  11. A banner message confirms that your request was successfully submitted and shares the request ID.

If your system is set up to allow you to request access for yourself, a card with your identity details is the first card displayed on the Select User tab. This option must be configured in IdentityIQ.

  1. On the Manage My Access tab, select the Add Access tab.

  2. Select Browse all access items to display the full list of access options available. To search for available access, select either Search by Keywords or Recommended for You from the dropdown options.

    • Search by Keywords – enter a search term and select the search icon.

    • Recommended For You – if AI Services has been configured for your organization, the Search field includes an option in the drop-down list to show access items that AI Services recommends for you based on peer group analysis. Recommendations are available only for your own access; if you are able to request access for other users such as your direct reports, you will not be offered recommendations for those users. See Enabling Recommendations for Access Requests.

    • You can also select the Yes, show my recommendations button to see AI-recommended access if AI Services are configured.

  3. Alternately, select Filters to use various filtering options, including Role Source Application, Role Source Attribute, Role Source Value, Entitlement Application, Entitlement Attribute, Entitlement Owner, and more. After choosing your filter criteria, select Apply to see search results.

    • The Filters button turns green when filtering is applied to alert you that you are seeing a filtered subset of access. To clear filtering, select the Filters button again and select Clear.

  4. From the listed results, select the checkmark icon for each access item you want to add.

    • Some roles allow related roles to be added. To add the additional roles, select the role or roles and click Continue.

  5. Select Next to move on to Review and Submit.

    • A pop-up message notifies you if a duplicate change has been requested.

  6. Review access request information and verify your choices. Based on how your system is configured, before submitting the access request you may:

    • Remove an access request entry – select the X icon next to the access item.

    • Add an attachment (for single user requests only) – if your configuration allows, you may add attachments by selecting the paper clip icon. See Adding Attachments to Access Requests.

    • Add a comment – if your configuration allows, you may add a comment to your request by selecting the comments icon to the right. Your system may be configured to required comments, in which case the Comment icon is flagged with a red asterisk. See Viewing and Posting Comments.

    • Change the priority – see Editing an Access Request

    • Change the sunrise / sunset dates – see Editing an Access Request

  7. Select Submit. After you click Submit, forms are issued if further information is needed before your request can be completed. A pop-up is displayed enabling you to complete the form immediately or send it to your Home page.

  8. A banner message confirms that your request was successfully submitted and shares the request ID.

A permitted role is generally a requested or assigned role and is not automatically granted to a user. Permitted roles are enabled by default. When permitted roles are available, they are displayed on the following tabs:

  • Add Access – when you select a role that has permits, the associated permitted roles are displayed as cards after you complete the account selection setup.

  • Review – permitted roles are displayed below the associated assigned role.

You can set sunrise / sunset dates and comments on permitted roles.