Request Access

This option must be configured on the Lifecycle Manager configuration page.

1. On the Select User tab, click the check icon next on the card for one or more identities.
   
   To search for an identity, enter the name or first few letters of an identity in the search box and click the search icon. To limit the number of listings, click Filters, select specific filter criteria, and then click Apply

2. Navigate to the Manage Access tab and select the Add Access tab.
   
   To search, enter a term in the search box and click the search icon. Click the menu icon next to the search file to change between search types: Keyword, User Access, or Populations. To limit the number of listings, click Filters, select specific filter criteria, and than click Apply.
   
   Click Browse all access items to display the full list of access options available.

3. If a role or entitlement requires an account the identity does not have, the Select Account dialog displays. To create the new account, select the account and click Apply.

4. After IdentityIQ validates that the user does not currently have the requested access, the number of items you selected displays on the Add Access tab.

5. Navigate to the Review and Submit tab and review the access request information for each identity.

6. Before you complete the access request, you can:

• Remove an access request entry — Click the X icon next to the access item.

• Add an attachment (single user requests only) — See Add Attachments

• Add a comment — See View and Post Comments

• Change the priority — See Change Priority

• Change the sunrise/sunset dates — See Change Sunrise/Sunset Date

After you click Submit, forms are issued if further information is needed before your request can be completed.

If you are requesting access for a single identity, a popup is displayed enabling you to complete the form immediately or send it to your Home page.

If you are requesting access for multiple identities, the forms are sent directly to your Home page and no popup is displayed.

7. When you have completed all your review tasks, click Submit to complete the access request.

If your system is set up to allow you to request access for yourself, a card with your identity details is the first card displayed on the Select User tab. This option must be configured in IdentityIQ.

1. On the Manage My Access tab, select the Add Access tab.
   
   To search, enter a term in the search box and click the search icon. To limit the number of listings, click Filters, select specific filter criteria, then click Apply.
   
   Click Browse all access items to display the full list of access options available.

2. Some roles allow related roles to be added. To add the additional roles, select the role or roles and click Continue.

3. Navigate to the Review and Submit tab and review the access request information.

4. Based on how your system is configured, you can:

• Remove an access request entry — Click the X icon next to the access item.

• Add an attachment (single user requests only) — See Add Attachments

• Add a comment — See View and Post Comments

• Change the priority — See Change Priority

• Change the sunrise/sunset dates — See Change Sunrise/Sunset Date

5. When you have completed all your review tasks, click Submit to complete the access request.

A permitted role is generally a requested or assigned role and is not automatically granted to a user. Permitted roles are enabled by default. When permitted roles are available, they are displayed on the following tabs:

• Add Access — When you select a role that has permits, the associated permitted roles are displayed as cards after you complete the account selection setup.

• Review — Permitted roles are displayed below the associated assigned role.

You can set Sunrise/Sunset dates and comments on permitted roles.