Creating Access Requests

Use

On the Access Request screen, you can create access requests for yourself, for another user, or for multiple users.

Prerequisites

The administrator has completed the activities for the Customizing activity Maintain Provisioning Settings, under Governance, Risk, and Compliance  Access Control  User Provisioning.

Procedure

1. From the Access Management work center, under the Access Request menu group, chooseAccess Request Creation.

2. Fill in the Reason for Request.

3. Under the Request Details area, enter the required information in the fields:

   Field	Description
   Request Type	Examples: New Account, Change Account, Superuser Access, and so on. You can maintain the list of available request types in the Customizing activity Define Request Types, under Governance, Risk, and Compliance  Access Control  User Provisioning.
   Request For	Choose to create a request for the following: Self, to create a request for yourself. The User field is inactive and displays your user ID. Other, to create a request on behalf of another user. The User field is active, and allows you to select the name of the user. Multiple, to create a request for multiple users. The application displays the Users tab page, and allows you to select multiple users. Choose Add to add each user manually, or choose Import to use a template to import multiple users.
   Priority	Examples: High, Low, and so on. You can maintain the list of available priorities in the Customizing activity Maintain Priority Configurations, under Governance, Risk, and Compliance  Access Control  User Provisioning.
   Business Process	Examples: HR and Payroll, Finance, and so on. You can maintain the list of available business processes in the Customizing activity Maintain Business Processes and Subprocesses, under Governance, Risk, and Compliance  Access Control.
   Functional Area	Examples: Sales, Human Resources, and so on. You can maintain the list of available functional areas in the Customizing activity Maintain Functional Areas, under Governance, Risk, and Compliance  Access Control  Role Management.

4. On the User Access tab page, choose from the following options to select the roles that you want to be assigned, and the systems for which you are requesting access:

   • Choose Add and select from the following:

     • Role

       • Click Add and then click Role to search for the roles that you want. After the system presents the results of your search, you can click a retrieved role name to access further details about the role such as the actions that are valid for a composite role.

       • If you select a Business Role, you can choose which environment you wish to provision. The environment options are: All, Development, Production, and Testing. This choice is only available to you if you set the Access Control configuration parameter 3026 (Enable Business Role Provisioning based on Environment) to Yes. The default value for this parameter is No.

     • System

       • Click Add and then click System to search for the systems that you want.

     • Firefighter ID

       • If your Request Type is Superuser, when you click Add, you will have the option to input a Firefighter ID.

   • Choose Existing Assignments to select from the list of roles and systems currently assigned to the user.

     If the Request For field is set to Multiple, the application disables this button.

   • Choose Import Roles to import a list of roles that you want to assign to the user.

5. In the Provisioning Actions column, select the appropriate action, such as Create User, Assign (role), and so on.

   You can set the provisioning actions available in the drop-down list in the Customizing activity Define Request Type, under Governance, Risk, and Compliance  Access Control  User Provisioning.

6. In the Comments column, choose Add Comment and enter information about the request.

   You can set whether comments are mandatory in the Customizing activity Maintain Configuration Settings, under Governance, Risk, and Compliance  Access Control. For the relevant columns, set the following values:

   • Parameter Group: Access Request Role Selection

   • Parameter ID: 2036

   • Parameter Value: Yes or No, as needed

7. On the User Details tab page, enter all required information.

8. Choose Simulation, if you want to run a risk analysis of the requested roles and system access before submitting the request.

9. Choose Submit.

   The application sends an e-mail notification to the approver. You can configure e-mail in the Customizing activity Maintain MSMP Workflows, under Governance, Risk, and Compliance  Access Control  Workflow for Access Control. In the Maintain Path phase, under the Maintain Stages area, choose Notification Settings.

   Approvers can also access and process the request from their Work Inbox.

End users can view the status of the request from the Request Status quick link.

More Information

Viewing Your Request Status

Changing User Details

Reviewing and Approving Access Requests

Analyzing Risks When Submitting Access Requests