Identity Governance enables you to search, view, sort, and refresh a list of your current and completed access requests. You can also retract or retry a failed request. The status column displays details of the request, approval, and fulfillment events.
NOTE:Select the Refresh icon next to My Requests to refresh the status. Do not refresh the browser because it might lead to an error condition or require you to log in again. Additional administrator actions might also be required for the status to be updated.
To view a list of your requests, their status, and timeline:
Select Requests > Requests.
HINT:Requests that violate SoD policies have a warning icon next to the request name. Click the icon to view violated SoD policies.
Select the calendar icon to specify a date range for your search.
(Optional) Sort request items using accounts or item ID.
(Optional) Search for specific request items using typeahead search or advanced filters.
(Optional) Use page control (if shown) to page through all requests.
Select a request item status to view the timeline of underlying events associated with the request, including approver reassignments, approver feedback to requester, and fulfillment information.
Identity Governance updates the request fulfillment status when fulfillers fulfill a request, and when the application or a Customer, Global, or Data Administrator collects and publishes the application data source. For example, after a request is manually fulfilled, the fulfilled waiting verification status on the request timeline will change to verified only after a collection and publication.
(Optional) For expire request items, change the expiration date.
Expiration date also gets approved when a request is approved. Changing the expiration date will ultimately cause a new expiration request to be submitted that will then go through the same approval process as the original request.
(Optional) For expire request items, remove expiration.
Removing (retracting) an expiration request effectively cancels the expiration of the original request, and no approval process is possible. Hence, only Access Request, Customer, or Global Administrator are authorized to remove an expiration request.
(Optional) Click Show completed requests and specify a date range to view historical requests.
You can view only historical requests that are still in your operational catalog and have not been purged. The time period of items in the operational catalog depends on your company’s data retention policies.
(Conditional) If you have the authorization to view other users’ request, click View all requests at the top corner of the page to view all the requests.
When you might need to retract an access request that has not been fulfilled, you can revoke it directly in the application. A retracted request item moves from a tentatively retracted state to a completed retracted state.
NOTE:You can revoke a request only for a request item that is either in an approval pending or failed state. After fulfillment, use procedures in Requesting Access to remove or add access.
In the Access Request interface, select Request > My Requests.
(Conditional) If the Status of a request item is Approval Pending or Approval Failed, click Retract.
Occasionally, when you retract a request with a pending workflow approval task, the Workflow Approvals page might not immediately remove the pending approval task. The delay occurs because the scheduler responsible for deleting the data runs as per the interval specified in the Pending Process Interval field on the Workflow Administration ConsoleEngine and Cluster configuration page. For more information, see Configuring Workflow Engine and Cluster Settings.
Occasionally, access requests can fail. For example, if OSP is configured for HTTPS, but the server where the request workflow is running does not have the proper certificate in the cert store to be able to communicate with, the request will fail. After you have fixed the issue, you can retry the failed request item.
In the Access Request interface, select Request > My Requests.
Check the error message for information about the request item with Approval Failed status.
Fix the issue or contact your system administrator to fix the issue.
After the issue is fixed, click Retry.