Creating a Revoke Access provision
Use the Revoke Access provision to revoke permission assigned to a user or to revoke the existing roles assigned to a user.
To create a Revoke Access provision:
-
Select Manage > Provisions on the navigation bar and click to select Access Management. The Access
Management page is displayed.
Note: Alternately, you can also click to review the violations generated by a provision and perform an action, if required. See, Reviewing details of a provision.
-
Specify this information:
- Insight
- The name of the Insight for which the provision is created.
- Primary Object
- The primary object analyzed in this provision. Note: You can select User or Role as the primary object.
- Type
- The type of the Access Management provision created. Select Revoke Access Provision.
- Data Source
- The data source linked to the selected Insight.
- User
- The name of the user whose permissions or roles are to be revoked.
- Manager
- The manager of the user.
-
Click the Writeback Schedule section to select one of these options:
- Schedule Now: Select this option to perform the application writeback after the completion of the approval process.
- Schedule Later:
Select this option to schedule the application writeback at a future date and
time or the approval date and time, which ever is later. Click
Add. Note: The Schedule Later option is displayed only if the Completion of Provision in the corresponding Approval Process Template is set to Automatic.
-
Click the Other Details section to specify this information:
- Comments
- The additional information related to the provision.
- Email Settings
-
The users who must be notified when the status of the provision changes.
Note: You can modify the email notification settings, only if the Override this option check box is selected on the Settings > Configurations > Access Management Insights > Provision Options section.
- Approval Stages
- The approval process template assigned to the provision and the status of the approval.
- Click Save to save the provision. The provision is displayed on the Provisions page.