04/12/2022 01:24 PM
Request access, Request access for others and Manage Service account
Access, Application Role, Enterprise Role and Emergency roles which are requestable in request access and manage service account screens
End date extension is configurable only for access and roles if start date and end date were defined when the objects were initially requested
Click on the icon as highlighted below in Modify Access Request and add new end date before submitting request
Update Access End Date
Anyone who can request for access for the user can also extend the end date of the access
Yes, and Task type is “Update Access End Date”
On processing of the task, the end date of the access will get updated in SSM
Yes
Yes, supported in v5 version of createrequest API only for extension of access
Out of the box control will be rolled out which will pick up all the access which are about to expire based on a number of days in below configuration and send out an email to user/manager the list of entitlements that are about to expire from now until number of days configured
Configuration - 'Number of days before Entitlement expiry date' added.
Solved! Go to Solution.
04/12/2022 03:13 PM
Hi Aarthi,
Thanks for the insight.
Few question on point 8
1. Is this a new task type?
2. Also, what json of the connector will it call?
3. If its a new json, what all connector will be having it.
Thanks,
Minesh Shah.
04/12/2022 03:13 PM
Minesh,
Yes, it is a new task type as highlighted in Point 8 - Task type is “Update Access End Date”
We don't yet have the capability to integrate it with connector framework, however, PM team is looking for options to enable it future releases
04/12/2022 03:13 PM
Hello,
Do we have this capability available in SSM v5.5 SP 3.3?
Thanks,
Pallavi
04/12/2022 03:13 PM
Hi Pallavi,
Yes, it's available in v5.5 SP 3.3. however, it's available only for the entitlements assigned to accounts and not for the enterprise roles.
Allow Update of Access End Date should be enabled in Entitlement Types to get the modify end date option, please refer the below document for reference
Regards,
Santosh
04/12/2022 03:13 PM
Hello Santosh,
Is this feature integrated with Connectors? Can we propagate the expiry date changes to target system (SAP)?
Thanks,
Pallavi
04/12/2022 03:13 PM
Can you please tell in which version the option to modify end date on enterprise roles is available ?
Does this allow date extension (future) only ?
We're on version 5.5SP3, Allow Update of Access End Date this global config is available only if we enable end date mandatory config, if not it is grayed out
Is it possible to enable this without enabling end date mandatory ? considering a use case where we don't provide a end date when assigning the role