Skip to content

Working with access requests

Note

This is a legacy feature. Refer to Working with Access Requests to view the updated experience.

You can use access requests to gain access to apps or business roles. With an approval process that kicks off automatically, you can quickly access the systems and apps you need to perform your job. You can even request access for new teammates or employees.

To get the access you need, you can request access for:

  • Applications - A set of access related to a specific application within your company. When you request access for an app, you may also be asked to select an access profile, a bundle of access entitlements. For example, when you select an app, you may be asked if you require read-only access or admin access.
  • Entitlements - Access rights, such as group memberships or access permissions, granted to a user. For example, you can request to be added to a specific distribution list or Active Directory group in your organization to receive the access permissions granted to that group.
  • Roles - A bundle of access based on your position in your company. For example, if you are an accountant, you can request access to the Accountant role to receive the access you need to perform your job.

Requesting access

  1. Select Request Center from the navigation menu.

  2. Select the Applications, Roles, or Entitlements tab depending on the access you want to request.

    You can search for a specific application, role, or entitlement in its corresponding tab.

    Note

    The entitlement search will only return entitlements that start with the specific search term you've entered.

    You can also select a card to view more details about the access.

  3. Select Request in the corner of the card or in the details menu.

    If the request does not require approval, you'll automatically receive access. If the request requires approval, you must include further information.

  4. If your request requires an access profile, select an access profile in the new window. You can only request one access profile at a time.

  5. Under Requesting For, select Myself or Others depending on who the access is for.

    If you are requesting access for others, enter their name(s) using the dropdown menu. Users who already have access or have requested access will not appear in the list.

    Note

    If you are requesting access for an entitlement, you can only request access for up to 10 users.

  6. Add comments about the request to help reviewers determine if the access is needed.

  7. (Optional) Set an expiration date for the access. If the identity needs this access longer, you can edit this date on the My Team page or My Access page.

    Expiration dates and deprovisioning

    For requests submitted through the user interface, IdentityNow automatically starts the deprovisioning process on the expiration date at 12:00 AM, in the time zone defined in the requester’s browser settings.

    Expiration dates can include a time component when they are submitted through IdentityNow’s API with the Submit an Access Request endpoint. The time is included as part of the removeDate attribute.

    If IdentityNow is directly connected to the source system, the access is automatically deprovisioned.

    Note: The expiration date is not sent to the source system as an account attribute.

    If IdentityNow is not connected to the source system, a manual task to remove this access is created and assigned to the source owner.

  8. Select Submit to submit your request.

    If your request does not require approval, you may receive access immediately. This may take longer if the access must be manually provisioned.

    If your request requires approval, the request is sent to a reviewer or multiple reviewers. Each reviewer must approve your request before you are granted access. Your administrator may configure your org to reassign your request to another reviewer if the assigned reviewer does not review it by a set time.

    You will receive an email when your request is approved or denied. If your request is denied, you can contact the reviewer who denied the request for more information.

    To view the requests you've made, as well as the statuses and comments on those requests, select the My Requests tab at the top of the Request Center.