Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The IT Shop makes requesting access to resources easy. Instead of navigating throughout the Web site looking for a specific resource – like an application, a role, or a group – you can go to the IT Shop. The IT Shop allows you to quickly see what resources you currently have access to and shop for more. You simply search for what you want and put it in your cart. Once an item is placed in the cart, it stays in the cart until you check out or remove it. In this way, you can go about your business, navigating away from the IT Shop without losing the contents of your cart. When you are ready to checkout, that is, submit your request for access (known as a business request in EmpowerID), you review the items in your cart, add a reason for requesting those items and click then Submit. Your requests route for approval – to managers and, if necessary, other designated approvers.

...


Navigating the IT Shop

When you log in to the IT Shop, you can see the pages and controls to which you have access. In the below image, the logged-in user has full access to the IT Shop and can see all pages and controls. Depending on your access, you may or may not see everything shown.

...

The IT Shop application includes the following controls. Depending on your access to the IT Shop, you may not see all controls listed in the table.

Control

Description

Navigation Sidebar

Allows you to seamlessly navigate from the IT Shop to other EmpowerID applications

Filter Pane

Provides filters to allow you to selectively filter the resources they see.

Filters

Resource Type

Filter available resource by resource type. Available resource types include:

  • Applications

  • Application Roles (Groups)

  • Azure Licenses

  • Azure Admin Roles

  • Azure RBAC Roles

  • Management Roles

  • Mailboxes

  • Shared Folders

Shopping For

Shop for self or another person

Show Only Pre-Approved

Filter to show only roles for which the user is pre-approved to receive via Eligibility policies. This filter appears only when shopping for either Business Roles, Application Roles, or Management Roles.

Show Suggested Roles

Filter to show roles suggested for the user via Eligibility policies. This filter appears only when shopping for either Business Roles or Management Roles.

Applications

Filter to show only roles that can requested for a specific application. This filter appears only when shopping for either Business Roles, Application Roles, or Management Roles.

Business Domains

Filter available roles by Business Domain. This filter appears only when shopping for either Business Roles or Management Roles.

Business Functions

Filter available Business Roles by Business Functions. This filter appears only when shopping for either Business Roles, Application Role, or Management Roles.

Rights

Filter available roles by external system rights granted to those roles. This filter appears only when shopping for either Business Roles, Application Roles, or Management Roles.

Suggest Application Roles

Filter to show roles suggested for the user via Eligibility policies. This filter appears only when shopping for Application Roles.

Target System

Filters available Application Roles based on the selected Account Store Type and / or Account Store.

  • Select Account Store Type allows you to filter Application Roles to display only those roles belonging to Account Stores configured with the selected Account Store Type. Account Store Type is a configurable setting that can be used to logically categorize Account Stores.

  • Select Account Store allows you to filter Application Roles to display only those roles belonging to the selected Account Store. To be a filter option, Account Stores must have the IsPublishedInITShop property set to true. The filter is used in conjunction with the selected Account Store Type filter to display to you only the Application Roles belonging to the selected account store. Application Roles from other account stores are excluded.

Application Processes

Filters available Application Roles based on the selected process. This filter appears only when shopping for Application Roles.

TCode Search

Filters available Application Roles by TCode. This filter appears only when shopping for Application Roles

Shop By Reference Person

Filter available resources to show only those given to the referenced person. This is useful for quickly requesting access to the same resources of the referenced person when that person has the same job function as the person shopping for resources. The user shopping must have the same eligibility and visibility of the referenced person to see that person’s resources.

Advanced Search

Provides advanced search capabilities to further filter the resources that appear to the shopper.

Resource Panel

Provides a grid or card view of the roles for which the user can request. Each record can be clicked to open a pane that contains an Overview of the request and a Process Steps view from which you can see how far along in the approval process the request is. You can view and add comments here as well.

Shopping Cart

The shopping cart contains the business items the user has requested but not yet submitted. You shopping for both themselves and others will see two shopping carts. One containing items for themselves and the other containing items requested for others.

Manage Access Page

The Manage Access page provides you with views of their current access. (You Users with the appropriate delegations can view the access that others have as well as in addition to their own access.) You can access this page by clicking their name and selecting Manage Access.

The page contains the following elements:

  • Navigation Sidebar – Allows you to seamlessly navigate from the IT Shop to other EmpowerID applications.

  • Filter pane – The Filter pane provides filters to allow you to selectively filter resources by type.

  • Search Bar and Filter – Allows you to search their roles by selected type (or those of another Target Person) within the Manage Access page.

  • Target Person – Control that allows you to select the person for whom they want to view their current access.

  • Show Time Constrained – Control that allows you to filter access to those limited by time constraints.

  • Select Account Store Type – Control that allows you to filter Application Roles to display only those roles belonging to Account Stores configured with the selected Account Store Type.

  • Select Account Store – Control allows you to filter Application Roles to display only those roles belonging to the selected Account Store. To be a filter option, Account Stores must have the IsPublishedInITShop property set to true.

  • Resource Panel – Provides a grid or card view of the roles the user (or another Target Person) currently has. Each record has a Details button that opens a pane that contains an Overview of the role, with information about the types of access granted by the role as well as who owns the role. In addition to the Details button, there is a Revoke button on each that is visible to you with the authorization to revoke access to roles.

  • Pending Access – Control that directs you to the My Requests view of the My Tasks microservice.

Shopping for resources

You access the IT Shop to request available resources. This requesting action is known as creating or submitting a “Business Request.” Once a Business Request is submitted, EmpowerID routes it for approval based on the Approval Flow policies configured for that request. The following demonstrates a typical IT Shop user experience.

...

You access the IT Shop and filter the available resource types to show only those for which you are shopping.

...

You request access to a particular resource, which opens an Overview panel for the role. This panel provides more information about the resource, including who is an approver for the request

...

...

You then click Add to Cart to add the requested resource to your cart.

Once a resource is added to the cart, you can click the cart icon to submit your request.

...

  • .

...

When ready to submit the request, you do the following:

  • Select the Business Request Type. For the IT Shop, this should be the IT Shop Business Request Type.

  • Enter a Business Request Name.

  • Optionally add a comment.

  • Click Submit.

...

Once successfully submitted, a window appears stating that the cart was successfully submitted with a link to track the status of the request.

...

Clicking the link directs your browser to the My Request page of the My Tasks application with the Overview card for the request open. The card allows you to view details about your request and the number of approvals needed for it to be granted.

...


Using the Manage Access Page

...