Reactivate terminated user access

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Team,

Can we reactivate Terminated user access immediately ?

We wanted to automate the process of restoring the access for terminated users .

What are the ways we have it for immediate processing of a reactivation?

Thanks in advance.

2

Hi Sai, if terminated user is represented by some inactive LCS, you can just add sources in the active LCS. Is your case more complex than that?

3

You can achieve this using lifecycle state. Configure Rehire LCS and enable the access.

4

Hi Aman/Julian,

By changing LCS we only get basic access, We want all roles and entitlements to be restored ?

5

Can you elaborate on this? First off, if you want to restore the access for these users, why are their accesses revoked in first place?
If you explain your use case in detail probably you will get better suggestions

6

Hi nithesh,

Thanks for the reply.

We wanted to restore the access for disabled users.

By changing LCS using workflow, form and launcher we can only get birthright access.

We wanted to restore the entitlements and roles which is requested by User or User manager/Behalf for terminated users.

We can do it in IIQ, As we are storing identityHoistory in IIQ Snapchat.

Can we do it in ISC ?

Thanks

7

I still don’t understand why are you revoking these accesses in the first place if you want to restore them. Why not let the user continue to have these accesses even when their LCS changes to terminated

8

We don’t keep the access, when user got terminated.

We are trying to automate the process of Emergency re-activation of user and restoring his/her access(Roles and Entitlements ).

@sharvari , Is there any way to restore user access ?

9

In ISC you have Access History (Admin > Identity Management > Access History) feature which can give you information on the previous access the user had. You can check if that can be used to restore access.

Note: It’s only available if you have AI features enabled in your tenant.

10

Hi @sharvari ,

I’m trying to do it in Emergency reactivation QUickLink.

My question is it feasible in ISC to restore access?

11

I am not sure I understand your question but basically restore would be the same as reassigning or re-requesting the access they already had. So, you would use access history to query for old access and then submit an access request for it. Ideally it will still go though an approval process if there is one associated with it.

All of this might be possible to do in an ISC workflow.

1 Like