Short Description
Guide to address most common issues and possible solutions while configuring Access Requests.
Applicable version
All
Detail best practice
- A specific tile on the ARS page is not visible for a SAV Role (applicable to versions before EIC)
- Check the ‘Create Home Request section’ for the affected SAV Role and select the checkbox for the required tile
- Endpoint is not visible in Request Access page
- Verify whether the access query on the Endpoint meets the specified condition
- Check if the Endpoint is requestable.
- Check if Add Access and Remove Access Workflow is added in the Security System of the corresponding Endpoint.
- Entitlement is not visible on the Endpoint of Request Access page
- Check if the entitlement type of the corresponding Entitlement is set to "Table" or "Single select" or the preferrable format instead of "None" on the Endpoint.
- Check if there is no restriction on the Entitlement type Access Query.
- Role is not visible on the Endpoint of Request Access
- Check if the Role type of the corresponding Role type is set to "Table" or the preferrable format instead of "None" in the Endpoint.
- Check if there is no such restriction on the Role type Access Query in the Endpoint.
- Check if Requestable flag is set to true on the Role.
- Role is not visible in Request Enterprise Role Tile or Request SAV Role Tile.
- Verify the "Role Request query" in the "Role Request" section of the "Global Configuration".
- Check if Requestable flag is set to true on the Role.
- Access Request Approvals for a given endpoint is not getting assigned to the right approver.
- Verify the Workflow attached to the corresponding Security System and see if its correctly designed.
- Role Request Approval are not assigned to the correct approver.
- Verify the Workflow attached to the "Add Role Request" Workflow in the "Role" Section of the Global Configuration is correctly designed.
- Correct users list is not visible in Request Access for Other Tile, View Existing Access Tile, Request Enterprise Role Tile, Request SAV Role Tile for any specific SAV Role
- Check the "Whom to Request" parameter value in the corresponding SAV Role is correctly added.
- Correct users Request history is not showing in "Request History" section of any specific SAV Role.
- Check the "Request History" parameter value in the corresponding SAV Role is correctly added.
- Correct users Request history is not showing in "Parent User" section in the "Set up Delegate" tile of any specific SAV Role.
- Check the "For whom can the user setup delegate" parameter value in the corresponding SAV Role is correctly added.
- Correct users Request history is not showing in "Delegate User" section in the "Set up Delegate" tile of any specific SAV Role.
- Check the "Define Delegate Query" parameter value in the Global Configuration "Request" section is correctly added.
- User is not able up update the Set-up Delegate End date as Today's date.
- Check if the "Allow Delegation End-date to be set to Today" parameter value in the Global Configuration "Request" section is Enabled.
- Request has been raised but access not yet provisioned.
- Check if all the approvals have been granted.
- If approval has been completed then check if the task has been completed or errored out or still in the pending tasks queue.
- Triggered tasks are not processed even after the completion of approvals.
- Check if the option - Automated Provisioning is enabled on the Security System.
- Check if there are any basic or advanced filter conditions on the provisioning job which is restricting the processing of the certain tasks
- Check if provisioning job has run and has processed the pending tasks