Overview

This use case describes how user can request new IGA Entitlement to be created or updated to the directory.

With new entitlement creation and update, new actual group is created automatically to the directory or directories. 

Operators

IGA solution
Self-Service Portal
Manager
User
IGA Owner

Prerequisites

All request-able access rights (Entitlements and *Business Roles) are defined in IGA solution and they have needed information. 

Result

IGA Request is appropriately approved and send to provisioning process. All audit details are saved and can be reported. Owner, User and manager can follow up request status in Self-Service Portal.

Operating chain

1. User, Manager or Owner opens “Create and Update Entitlements”  service from Self-Service Portal
   
   
2. User, Manager or Owner chooses for the list
    
   • Create new entitlement and fulfills information
      
     • Mandatory: Entitlement name (technical and user friendly names), description, related application, directory, owner information, Self-Service information, approval level and approvers
       
       
     • Optional: Desired implementation date, additional information
       
       
   • Update entitlement and chooses from the list which IGA Entitlement needs to be updated
     
     
     • User friendly name, description, owner and approval level and Approvers, Self-Service information can be updated
       
       
   • Request mass import for entitlements and fulfills mandatory information
     
     
     • Mandatory: Application, desired implementation date, attachments (Excel)
       
       
3. Request is sent for Approval
   
   
   • Approver will get approval request in the Self-Service Portal
     
     
     • Approver can decline request, requester can see status from the Self-Service Portal
       
       
     • Approver can approve request, when provisioning is started towards Customer's directory
       
       
4. IGA solution receives IGA Request for access rights and starts provisioning process
   
   
   • IGA solution receives provisioning feedback from the directory and changes IGA Entitlements status to active or inactive, depending if desired implementation date is fulfilled
     
     
   • If additional information is added to the request IGA solution generates IGA Admin Task for IGA Admins to review information
     
     
5. Access Right Records (audit details) are saved, and process ends. 

Related datacards

IGA Request
IGA Entitlement
IGA Admin Task
Approval
IGA Access Right Record

Self-Service 

Create and Update Entitlements

Messages

User can see own open requests and their status, and request history from Efecte Self-Service portal, so it is highly recommended that email notifications are added to IGA solution in further development phase and try to guide users to portal at the first phase. Email notifications can be also added by IGA Admin.