Access Request - Review And Submit Button without Adding Entitlements

[chandu_k09]

Hello,

Currently for application access requests in IGA, users will go through the below steps to request new access.

1) Request New Access tile -> Select the endpoint/app

2) Click the Request New Account button (shown for new users with no accounts in the app) 

3) Then select the required Groups/entitlements by clicking "Add" 

4) Then Submit the request

However, users can also "NOT" select an entitlement/group and submit an Access Request. This will be a New Account Request. But this does not help, because user should also have selected the entitlement/group. New account alone will not give them access to the applications.  

I know end user training is helpful. But, is there an option is IGA where we can disable or grey-out the Review and Submit button if no entitlement/groups are added? 

Note - we are facing this for new users with no accounts in the endpoint. But for existing users with accounts already present have no issue with Modify. Here, the Review and Submit button is greyed out if user didnt select any entitlements. 

Thank you! 

[Sivagami · Accepted solution]

Please make sure required option is set as True on your requestable entitlement type. This way users can't submit new account request without selecting an entitlement.

-Siva

[chandu_k09]

Thanks for the suggestion. Tested for Add access, Modify (e.g. changing end date), and Remove. 

The Add and Modify works. 

Looks like as per screenshot, IGA doesn't let us remove entitlement when "True" is enabled. Is this a defect?

Thanks. 

[Sivagami]

Hi @chandu_k09 ,

If you want to remove the last entitlement from the account, you could use remove account option instead of removing the individual entitlement.

-Siva

[chandu_k09]

We have about 20+ apps which only have a single entitlement. So looks like the only option is to allow the remove account option?

[rushikeshvartak]

If you want to keep mandatory then in case of removal only option is remove account 

option available from manage my access  or request for others - select user - delete button near application name

[chandu_k09]

Thanks Rushikesh. Will use the recommendations.