Requests

Navigation

Introduction

A request is an electronic message that is initiated by an authorized IRC user for the following reasons:

• Changing a user's access rights either in IRC or within an ERP application

• Modifying roles, responsibilities, permission lists or user groups within an ERP application

• Creating new users

• Locking or unlocking a user's account in the ERP application

After a request is created, it undergoes an analysis. The request is then processed through a defined workflow called the approval process which ensures that a request is verified and approved by a defined set of authorized users before the change is implemented in the ERP application.

If rule book- connection mapping is enabled through the GenRuleEngineConfig.xml file  located at [InstallPath]\Approva\BizRights\Settings, only the rule books mapped to the  selected connection participate in the request analysis. However, if this mapping is not enabled, all the ERP specific rule books participate in the analysis. For example, if a SAP connection is selected, all SAP rule books participate in the analysis.

Page Access

To take action on requests, users must be assigned the following roles or custom roles containing the required permissions:

The Requests home page displays all the requests to be approved by the signed in user with details such as the object impacted, the requestor, the connection name and the current approval stage of the request.

Icons next to the requests indicate the status of the requests. You can sort the requests displayed on this page based on the current stage of the requests.

Actions from This Page

This page enables you to perform the following actions:

• Search for a request

  Click here to search for the required request.

• View History

  The History tab on the Requests home page lists all the available requests along with details such as the object impacted, requestors name, the connection name, the current approval stage of the request and the current status of the request.

  On this tab you can:

  • Click a request link to view the request details page. The request details page displayed will vary depending on the request type an whether the request has generated violations.

  • Click the Track link in the State column. A pop-up window displays details of the request such as the object name, the connection name , the current stage of approval, number of violations generated,  number of violations mitigated and the approvers for the request.

  Note: The Track link displays information about approval or mitigation by stage approvers only and not the mitigation done by the requestor.

   

• Download data

  Click the Download icon to download the information on this page to a CSV format. Information in the CSV file is displayed in the default format even if it has been sorted on this page. The date and time information downloaded is the application server time, even if the information is downloaded at a different time zone.

   

• Approve or Deny

  Click the Approve or Deny icon in the Actions column to either approve or deny the request respectively. A pop-up window is displayed where you can add in your comments for approving or denying the request. Comments by the requestor and other approvers are also displayed in the pop-up window.

  Note: Actions on a request can also be taken from the Actions panel on the Request Details page.
  
  You cannot take action on requests that are partially complete due to time out issues. You need to increase the violation cap limit through the Configuration page (What-if and Request settings) and re-create the request so that it is completed and you can take action.

  After you take action on a request, the request moves to the Inbox and the Requests home page of the next stage approver and to the History tab of the signed-in user.

  Note: Quick Approve and Quick Deny icons will not be enabled only in the following scenarios:

  • The request has generated violations. Violations are indicated with an icon .
  • The request completion option is set to manual and the request is in the manual completion stage.
  • Additional information about the request is required by any one of the approvers of the request.

   

   

  Creators of Emergency Access Role Assignment requests and administrators can view the Quick Process icon  that enables them to manually revoke the emergency role assignment before the role assignment validity period lapses. The details of this manual revocation is displayed on the Comments tab (More Details panel) of the request details page.

   

Create a New Request and View Details

Depending on the ERP application, this page enables you to create the following request types and view the request details at a later stage.

ION

• Create a request for ION

  You can create the following types of requests for the Access Manager for ION:

  • ION- Role Assignment

  • ION- User Creation

  Note: For creating a new User Creation Request, the option Allow new user creation through a request (Settings->Configurations->User Creation Options) must be set to Yes.

• View details of a request without violations

  Requests that have not generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

• View details of a request with violations

  Requests that have generated violations are identified by an icon. To view details of such requests, click the request name link either on the Requests home page or on the History tab. The request details page for the selected request is displayed.

Lawson System

• Create a request for Lawson

  You can create the following type of requests for the Access Manager for Lawson:

  • Lawson - Role Assignment

  • Lawson - User Creation

  Note: For creating a new User Creation Request, the option Allow new user creation through a request (Settings->Configurations->User Creation Options) must be set to Yes.

• View details of a request without violations

  Requests that have not generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

• View details of a request with violations

  Requests that have generated violations are identified with an icon. To view details of such requests, click the request name link either on the Requests home page or on the History tab. The request details page for the selected request is displayed.

SAP System

• Create a request for SAP

  You can create the following type of requests for the Access Manager for SAP

  • SAP - Authorization Change

  • SAP - Role Assignment

  • SAP - User Creation

  Note: For creating a new User Creation Request, the option Allow new user creation through a request (Settings->Configurations->User Creation Options) must be set to Yes.

  • SAP - Role Assignment to Position

  • SAP - User De-provisioning

  • SAP - User Re-provisioning

  • SAP - Emergency Access

  Note: The following settings can be configured for SAP requests:
  
  By using the ApprovalProcessSettings.xml file located at [InstallPath]\Approva\BizRights\Settings, you can configure the following settings:
  
       Attempt write-back if first write-back fails
       Number of times write-back should be attempted
       Interval (in minutes) after which a draft request should be processed
  
  By default, SAP requests will not be routed based on information provided during a request creation. By configuring ParticipatingObjectsConfig.xml file located at [InstallPath]\Approva\BizRights\Core\bin\Support, you can route a request based on information provided during a request creation.
  
  For more details, refer to the SAP - Configuration Settings Guide.

   

   

• View details of a request without violations

  Requests that have not generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

• View details of a request with violations

  Requests that have generated violations are identified with an icon. To view details of such requests, click the request name link either on the Requests home page or on the History tab. The request details page for the selected request is displayed.

Oracle System

• Create a request for Authorizations Insight for Oracle

  You can create the following type of requests for the Access Manager for Oracle:

  • Oracle - Responsibility Assignment Management

  • Oracle - Menu Change management

  • Oracle - User Creation

  Note: For creating a new User Creation Request, the option Allow new user creation through a request (Settings->Configurations->User Creation Options) must be set to Yes.

  • Oracle - User De-Provisioning

  • Oracle - User Re-Provisioning

  • Oracle - Emergency Access

• View details of a request without violations

  Requests that have not generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

• View details of a request with violations

  Requests that have generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

PeopleSoft FISCM System

• Create a request for Authorizations Insight for PeopleSoft FISCM

  You can create the following type of requests for the Access Manager for PeopleSoft FISCM:

  • PeopleSoft FI - User Creation

  Note: For creating a new User Creation Request, the option Allow new user creation through a request (Settings->Configurations->User Creation Options) must be set to Yes.

  • PeopleSoft FI - Role Assignment Request

  • PeopleSoft FI - User Re-Provisioning

  • PeopleSoft FI - User De-Provisioning

  • PeopleSoft FI - Permission List Assignment Management

  • PeopleSoft FI - Emergency Access

• View details of a request without violations

  Requests that have not generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

• View details of a request with violations

  Requests that have generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

PeopleSoft HRMS System

• Create a request for Authorizations Insight for PeopleSoft HRMS

  You can create the following type of requests for the Access Manager for PeopleSoft HRMS:

  • PeopleSoft HR - User Creation

  Note: For creating a new User Creation Request, the option Allow new user creation through a request (Settings->Configurations->User Creation Options) must be set to Yes.

  • PeopleSoft HR - Role Assignment Request

  • PeopleSoft HR - User Re-Provisioning

  • PeopleSoft HR - User De-Provisioning

  • PeopleSoft HR - Permission List Assignment Management

  • PeopleSoft HR - Emergency Access

• View details of a request without violations

  Requests that have not generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

• View details of a request with violations

  Requests that have generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

SAP Enterprise Portal System

• Create a request for Authorizations Insight for SAP Enterprise Portal

  You can create the following type of requests for the Access Manager for SAP EP:

  • SAP EP Role and User Group Assignment

  • SAP EP User Creation

  Note: For creating a new User Creation Request, the option Allow new user creation through a request (Settings->Configurations->User Creation Options) must be set to Yes.

  • SAP EP User De-Provisioning

  • SAP EP User Re-Provisioning

• View details of a request without violations

  Requests that have not generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

• View details of a request with violations

  Requests that have generated violations are identified with an icon. To view details of such requests, click the request name link either on the Request home page or the History tab. The request details page for the selected request is displayed.

Date and Time Parameters in Requests

Click here to view the date and time details related to different requests in IRC.