Access Requests – Common issues and possible solutions

[prashant45v]

Short Description
Guide to address most common issues and possible solutions while configuring Access Requests.
Applicable version
All
Detail best practice

1. A specific tile on the ARS page is not visible for a SAV Role (applicable to versions before EIC)
   • Check the ‘Create Home Request section’ for the affected SAV Role and select the checkbox for the required tile
2. Endpoint is not visible in Request Access page
   • Verify whether the access query on the Endpoint meets the specified condition
   • Check if the Endpoint is requestable.
   • Check if Add Access and Remove Access Workflow is added in the Security System of the corresponding Endpoint.
3. Entitlement is not visible on the Endpoint of Request Access page
   • Check if the entitlement type of the corresponding Entitlement is set to "Table" or "Single select" or the preferrable format instead of "None" on the Endpoint.
   • Check if there is no restriction on the Entitlement type Access Query.
4. Role is not visible on the Endpoint of Request Access
   • Check if the Role type of the corresponding Role type is set to "Table" or the preferrable format instead of "None" in the Endpoint.
   • Check if there is no such restriction on the Role type Access Query in the Endpoint.
   • Check if Requestable flag is set to true on the Role.
5. Role is not visible in Request Enterprise Role Tile or Request SAV Role Tile.
   • Verify the "Role Request query" in the "Role Request" section of the "Global Configuration".
   • Check if Requestable flag is set to true on the Role.
6. Access Request Approvals for a given endpoint is not getting assigned to the right approver.
   
   • Verify the Workflow attached to the corresponding Security System and see if its correctly designed.
7. Role Request Approval are not assigned to the correct approver.
   • Verify the Workflow attached to the "Add Role Request" Workflow in the "Role" Section of the Global Configuration is correctly designed.
8. Correct users list is not visible in Request Access for Other Tile, View Existing Access Tile, Request Enterprise Role Tile, Request SAV Role Tile for any specific SAV Role
   • Check the "Whom to Request" parameter value in the corresponding SAV Role is correctly added.
9. Correct users Request history is not showing in "Request History" section of any specific SAV Role.
   • Check the "Request History" parameter value in the corresponding SAV Role is correctly added.
10. Correct users Request history is not showing in "Parent User" section in the "Set up Delegate" tile of any specific SAV Role.
    • Check the "For whom can the user setup delegate" parameter value in the corresponding SAV Role is correctly added.
11. Correct users Request history is not showing in "Delegate User" section in the "Set up Delegate" tile of any specific SAV Role.
    • Check the "Define Delegate Query" parameter value in the Global Configuration "Request" section is correctly added.
12. User is not able up update the Set-up Delegate End date as Today's date.
    • Check if the "Allow Delegation End-date to be set to Today" parameter value in the Global Configuration "Request" section is Enabled.
13. Request has been raised but access not yet provisioned.
    • Check if all the approvals have been granted.
    • If approval has been completed then check if the task has been completed or errored out or still in the pending tasks queue.
14. Triggered tasks are not processed even after the completion of approvals.
    • Check if the option - Automated Provisioning is enabled on the Security System.
    • Check if there are any basic or advanced filter conditions on the provisioning job which is restricting the processing of the certain tasks
    • Check if provisioning job has run and has processed the pending tasks