What permissions are required to Create Change Requests from Reviews using RSA Identity Governance and Lifecycle?
Originally Published: 2019-03-14
Last Modified: 2023-09-24
Article Number
Applies To
RSA Version/Condition: All
Issue
Resolution
Change Requests may be generated from a review in one of two ways:
- Automatically, or
- Explicitly by Owner.
The "Generate Change Request: Explicitly by Owner" is an implicit permission that is granted to the Review Owner. It allows some different grouping to be selected when creating the Change Request for review items that reviewers select to revoke. There is no need for any additional permissions to be added.
The "Generate Change Request: Automatically" option allows the Change Request to be created when the Reviewer or the sign-off person saves the Review. The person who saves the review will be the Requestor of the change request. There is no need for any additional permissions to be added.
Monitors that have write_access or admin can also perform the review and when they save the review a change request is created using the revoled items. No need for any additional permission as well.
