ISC Access Request confirmation notification to Approver Groups

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello team,

need suggestion that how to implement the notification to other Access request reviewer after approving by one of reviewers in ISC. when an access request for addition or removal is submitted for approval to the approver members. In a scenario where there are four members in the approver group who have received a notification or email regarding the next steps, if one of the approvers takes action on the request, how will the remaining members be informed of the action that has been taken?

Thanks

2

Seems like the access request decision event trigger would suit this use case

3

Can you please confirm how to implement this. in which workflow we need to add this or any subscription.

4

Hi @niketnova

If an approver group needs to review an access request or certification, every user in the approver group will receive a notification. Any member of the group may take the requested action on behalf of the group. If a member of the approver group has already reviewed an access request, it will disappear from other members list and they will no longer see it as pending. Only one person per group needs to approve or deny access.

Check this documentation Reviewing Access Requests - SailPoint Identity Security Cloud User Help

I hope this would help.

5

yes but wanted to modify the decision notification that any one reviewer approve that request, other group members can be notified that request has been approved

6

I was thinking it would be a separate workflow that was triggered using the access request decision trigger

7

Approval notifications are sent to all members of an approver group simultaneously. As soon as one member approves or denies the request, the approval step is completed and the remaining approvers no longer have an active task. I don’t think there’s a native capability or workflow based option to modify the original notification for the other approvers after action has been taken.

Others can correct me if I misunderstood this.

8

I’m not reading this as they want to modify the original notification workflow, they just want an addition notification sent to the others that did not act on the approval that it has been approved by someone else in the group. Seems to be an informational notification so someone doesn’t read the first email, log in to approve, then wonder why it’s no longer there.

1 Like
9

@mcheek Yes that’s correct. i have created the workflow seems it doesnt triggered the proper email. noticed that email template details are not populating and also not sending any emails to the rest of the reviewers. workflow is running without error. can you please suggest on this.

Access Request Decision_testing.json (10.2 KB)

10

You’ll have to create your own email from the workflow and likely perform a lookup on the access item/governance group to see who the other approvers are.

The trigger includes who approved it and what the item was, so that should be enough information to find the remaining info you need with a few other API calls

11

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.