Overview

This use case describes how IGA Admin or Application Admin can manage physical accesses and their availability on the Self-Service Portal. 

Operators

IGA solution
Self-Service Portal
IGA Admin
Application Admin

Prerequisites

Integration or provisioning needs to be implemented. 

Result

IGA Admin or Application Admin can manage, report and audit physical accesses and accounts. 

Operating chain 

1. IGA solution reads user account and group information from the target system (via Efecte Provisioning Engine or via integration). 
   
   
   • Physical access accounts are read to IGA Account datacards
     
     
   • Physical access groups are read to IGA Entitlement datacards
     
     
     
2. IGA Admin can fulfill physical IGA Entitlement information and publish them to be available in the Self-Service Portal 
   
   
   • Please check, use case for Manage IGA Entitlements
     
     
3. IGA Admin can also create Re-certification request related to only privilege accesses and accounts. 
   
   
4. Existing users with physical IGA Account can now use "Physical Access Service" from the Self-Service Portal
   
   
5. Users can also request privilege account from the Self-Service Portal, by choosing "Request Privilege Account" service. 
   
   
6. IGA Access Right Records are created and audit details are saved. 

Related datacards

IGA Entitlement
IGA Account

Views and dashboards

• Activated privilege accounts (privilege IGA Accounts in use)
• Disabled privilege accounts, with permissions to use privilege accesses
• Privilege accounts expiring in one week
• Privilege IGA Entitlements