I have an application where there are 5 types of access (entitlements) and for the provisioning process to be done correctly (creation of an account in the application), it is mandatory to send 1 value for each type of entitlement (I mean, sending all 5 accesses in the same request).
For now it is not possible to group access by role (this would be the best option), and users will request access through the Request Center.
I would like to know if it is possible in some way to customize the Request Center, so that, when a user selects this application, it is mandatory to select the 5 types of access?
If this is definitely not possible, I would handle it using Forms and a Workflow.
Thanks in advance.
You could bundle all 5 entitlements into one access profile then make the access profile requestable. Also, you have the option to configure the access profile inside an ‘Application’ object, which will show up under the ‘Applications’ tab in the Request Center. This gives you the option to configure an application description, image, etc.
I like to reserve roles for access across different sources or access that has some sort of assignment criteria associated. I’m curious though why you cannot group the 5 access items into a role?
It is not possible to group accesses by roles or access profiles, because there are around 600 accesses and the application’s technical team cannot identify and generate the necessary grouping to cover as many combinations that may arise.
Currently (manual process) through a JIRA form, users request the value of each access, which is highly variable, and thus the permissions are assigned.
Hi @abeltran ,
A potential workaround could be: Since 5 entitlements are mandatory, if default entitlements are present, utilize the beforeProvisioning rule to add the remaining 4 entitlements during the CREATE operation.
There are no default entitlements and only the requester can indicate what access they should have for each type.
I think it is not possible to make any modifications in the Request Center, I will review it using a WorkFlow and a form that allows the user to select the accesses, after this another form that can be sent to an approver, and based on this information that will be provision the account with the permissions.