Request for Others - ISC Admin

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

I have turned on ‘Enable Requests on Behalf of others’ with the ‘By Managers for their Team’ option checked.

I am not a manager, but am an ISC Admin with the ‘Admin’ user level checked.

When I go to request center, I do now see the options for ‘Self’, ‘Team’ and ‘other on team’ - however their is no option to make requests outside of my team or self.

Should an ISC Admin be able to make requests for anyone in the system, similar to how an IIQ Admin could used Manage User Access to make requests for anyone?

EDIT: Selecting ‘By Everyone for Anyone’ allows Admins to do requests, but that seems undesirable. Is their some other setting or user level, even for say IT people to be able to come in and request for anyone?

Thank you for any guidance.

3

From the topic solution: Solution

When you go to Admin > Global > System Settings, select System Features in the left panel.

Under the Access Request section, is the option “By Everyone for Anyone” selected?

4

Hi @iiq-isc - Thank you for the reply!

I saw that it works IF you give EVERYONE the ability to request for others.

I feel this will be undesirable behavior for anyone to request for anyone. I was hoping - first, that Admins could request for all and second if IT Help Desk could request for all.

Is the a way to have ISC Admins and/or Help Desk people to request for ALL, without allowing EVERYONE to request for ALL?

Thank you!

5

As per User Level Access Matrix - SailPoint Identity Services , end users are able to access the request center as well, so not sure if isolating is possible by default. Maybe, the solution is to put accesses in some segment which would isolate accesses from being visible for requesting except for people belonging to the segment, Managing Access Request Segments - SailPoint Identity Services.

6

There are 2 options:

Select By Managers for their Team or By Everyone for Anyone, depending on who should have the ability to make access requests for others.

  • By Managers for their Team only allows managers to make requests for their direct reports.
  • By Everyone for Anyone allows all users to make requests for any other user.

& the below is valid business scenario/use case:

Is the a way to have ISC Admins and/or Help Desk people to request for ALL, without allowing EVERYONE to request for ALL?

image
image715×125 3.22 KB

7

We decided to just open up to Everyone, thank you for the replies.

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.