Overview

All access right related requests from Self-Service Portal needs to be advocated by users Manager, if Manager is also requester, there is no need for separate approval. 

Some access rights may need second level approval, when IGA Approver, added to Entitlement or *Business Role, approves requests after Managers advocate.  

If **Re-certification Request is created, IGA solution generates approval request to Self-Service Portal for users defined in Re-certification Request.

Operators

IGA solution
Self-Service Portal
Manager
User
IGA Admin
IGA Approver 1
IGA Approver 2

Prerequisites

All required information for approval process and Approvers is added in IGA solution.   

Result

Request is approved or declined.

Operating chain

1. All approvals are made in Self-Service Portal and request details are available according approval request origin. 
   
    
2. Approval can be made by:
   
   
   • Manager who needs to advocate subordinates access right request made from Self-Service Portal
     
     
     • If Manager request access rights to subordinate, no separate advocate is needed
       
        
   • Managers and IGA Approvers who needs to approve **Re-certification Request for re-conciliated access rights
     
      
   • IGA Approvers who has mandatory approval responsibility defined in Entitlement or *Business Role datacards.
     
      
   • Users, Managers, and IGA Approvers when **Re-certification request needs to be approved 
     
     
     • **Re-certification Request can concern single Entitlement or *Business Role to be reviewed
       
        
     • **Re-certification Request can concern users all active access rights to be reviewed
       
        
     • **Re-certification Request is sent to Manager if de-provisioning notices exceptions on user’s access rights
       
        
3. Approval request can be approved or declined
   
   
   • If approval request is declined, mandatory justification needs to be added
     
      
   • If **Re-certification request is declined, depending on settings set by IGA Admin or IGA Approver, access rights might be automatically removed from target systems.
     
      

1. Comments can be added to approval request
   
    
2. Access Right Records (audit details) are saved, and process ends. 

Related datacards

IGA Request
Approval
IGA Re-certification Request**
IGA Access Right Record

Self-Service 

ESS approval capabilities

Messages

User can see own open requests and their status, and request history from Efecte Self-Service portal, so it is highly recommended that email notifications are added to IGA solution in further development phase and try to guide users to portal at the first phase. Email notifications can be also added by IGA Admin.