21.4 Assigning Request to Identity Governance Users

The method for giving Identity Governance users the ability to request and approve access varies.

Access Request Activity

Configuration Method

Configured By

Add items to Browse list

Create an Access Request policy and add items to the policy.

Customer, Global, or Request Administrator

Add items to Recommended items list

Add items to a request policy that are covered in a business roles policy.

Customer, Global, or Request Administrator

Specify approval rules for request Items

Create a request approval policy and assign permissions, applications, or roles to that policy either while editing the policy definition or in the catalog using bulk select menu.

Customer, Global, or Request Administrator

Specify coverage map for request approvals

Create coverage map using Policy > Coverage Maps menu, and then specify approvers in a request approval policy as coverage map.

For information about creating coverage maps, see Using Coverage Maps.

 

Configure request item text or icons

(Verify) Edit the permission, application, or technical role in the data source, the catalog, or with the bulk edit feature.

Customer, Global, or Request Administrator

Create and edit custom request and approval form

Edit the permission or application in the catalog.

Customer, Global, or Request Administrator, or Application Owner

Manage how requests are fulfilled

Identity Governance Fulfillment > Configuration.

For information about configuring fulfillment targets, see Configuring Fulfillment.

Customer, Global, or Request Administrator

Manage who can request on behalf of others

Requesters tab in appropriate Request Policy.

Customer, Global, or Request Administrator

Manage email notifications for request approvals

Notifications section in each approval step of the appropriate Request Approval Policy

Customer, Global, or Request Administrator

Create an Access Profile to allow requesting collections of authorizations

Technical role in the catalog added to Request Policy

Customer, Global, or Request Administrator

Control approval decision support information

Similarity profile settings in Identity Governance Configuration > Role Mining and Analytics Settings.

For information about configuring similarity profile settings, see Configuring Analytics and Role Mining Settings.

Customer, Global, or Request Administrator