The current out of the box solution for Change Access appears to be designed to enable the removal of someone's existing access but does not allow the person making the request to modify the access (e.g., if I have read access and I wish to request update access). I would like to see an out of the box process so that I can request to have the read access taken away and the update/manage access added as part of the same request workflow vs having to submit two separate requests. Thoughts???
Hi Michael,
Could you please let us know which product you are referring to so that we can move this discussion to the proper space?
Thanks,
Jeff
RSA Via Identity & Access Governance
Michael Duncan| Ameritas® | IT Business Process Manager/ IT ? Enterprise
Security
1876 Waycross Road, Cincinnati, OH 45240 | p: 513-595-6529 | f:
513-595-2888| mduncan@ameritas.com
Hi Michael,
By design the product purposefully represents the different levels of access as separate entitlements.
Each entitlement is a combination of "resource" :- "action"
So in your example, to request a change from read to update. You are in essence removing the resource:-read access and granting the resource:-update access. What happens at fulfillment stage would be up to the technical integration with that platform.
Change Access option allows to remove and add access as part of the same request as shown below.
Hi Michael,
By design the product purposefully represents the different levels of access as separate entitlements.
Each entitlement is a combination of "resource" :- "action"
So in your example, to request a change from read to update. You are in essence removing the resource:-read access and granting the resource:-update access. What happens at fulfillment stage would be up to the technical integration with that platform.