Overview

This use case describes IGA solutions users can managed. 

IGA solution user can be

1. Self-Service Portal users (user, Manager, Approver etc.)

2. IGA solution user (IGA Admin, IGA Owner etc.)

Operators

IGA solution
IGA Admin
Customers directory (recommended)

Prerequisites

IGA solutions users are managed similar way than other user accounts and accesses are managed in the Customers directory. 

1. This means that user needs to have user account in the directory

2. IGA solutions access are created as groups to the directory and read to IGA Entitlement datacards

Result

Customers users are able to access Self-Service Portal and in IGA solution (Matrix42 Service Management platform) functionalities. Users have accesses as defined in IGA Solutions user groups section. 

Operating chain for accessing IGA solution

1. All users who will be using Self-Service Portal or IGA solution (Matrix42 Service Management platform) needs have user account in the directory
   
   
2. All groups, which are used for accesses Self-Service Portal or IGA solution (Matrix42 Service Management platform) needs to be created to the directory
   
   
   • It is recommended that also Matrix42 Consultants using Customers Matrix42 solution, are created to the directory and accesses are managed by using same process
     
     
3. User accounts and groups are read from the directory
   
   
   • User accounts are read to IGA Account datacard
     
     
   • Groups are read to IGA Entitlement datacard
     
     
4. Based on user account and group memberships, IGA solution grants accesses to different user groups
   
   
   • IGA Entitlements needs to be related to Person datacard
     
     
5. Depending on which package Customer is using,
   
   
   • Group membership connections can be created automatically by using IGA Automated Rules** (IGA Growth and Enterprise)
     
     
   • Group membership connections can be created straight to Customers directory (all packages)
     
     
   • Group membership connections can be multi-edited in IGA solution and automatically provisioned to the directory (all packages)
     
     
6. User accesses to IGA solution can be managed, reported and audited by using same use cases that are used for managing any other accesses
   
   
   • IGA Admin can manage IGA solution accesses, approvals etc. like described in Manage Entitlements use case
     
     
   • IGA Admin can create IGA Automated Rules** for granting accesses automatically based on users organizational unit, title or Cost Center.
     
     
   • Users can use "Request Accesses" service from Self-Service Portal
     
     
   • Managers can use "On-board New User or Request Access for Subordinate" services from Self-Service Portal
     
     
   • IGA Admin can create re-certification** request regarding IGA solution accesses
     
     
   • IGA Admin can report and audit IGA solution accesses by using IGA solutions reporting tools
     
     
   • Users accesses to IGA solution are managed according to Manage User Lifecycle** use case
     
     
   • IGA solutions admin level accesses can be managed as privilege accesses***

1. Responsibilities are managed inside of the IGA solution
   
   
2. IGA Admin can manage Approvers in IGA Entitlement, IGA Business Role*, IGA Re-certification** and IGA Set Account Information* datacards
   
   
3. Support group member are managed in xxx
   
   
   • Support group members can also be managed by using directory groups
     
     
4. Users IGA responsibilities can be managed as a part of other use cases, 
   
   
   • IGA Admin can report and audit IGA solution accesses by using IGA solutions reporting tools
     
     
   • Users accesses to IGA solution are managed according to Manage User Lifecycle** use case
     
     
   • User can delegate approval responsibilities to substitute 

Related datacards

IGA Entitlement
IGA Access Right Record
IGA Account