The EmpowerID IT IAM Shop microservice is an EmpowerID application that is predefined with numerous protected application subcomponents—termed subcomponents – termed “subcomponents” from this point forward—out forward – out of the box. These subcomponents provide functional access to the microservice for users in that they make up the individual pages and controls users with which user interact. Each subcomponent is itself an application, which means access to these individual pages and controls can be added to and removed from users through Access Level assignments. Additionally, this architecture makes the microservice customizable. Subcomponents can be added to and removed from the application directly in the EmpowerID Web interface.
Subcomponents configured with the default IT IAM Shop microservice include those listed in the below table.
...
Type |
---|
Subcomponent
Description
Display Name | Description | Application Resource GUID | |
---|---|---|---|
Control | Azure License Pool Control IT Shop | Control that lets the user filter azure licenses against a specific azure license pool. | 829ac800-6fe9-4ce6-b2a1-f45d14518bbf |
Control | Business Roles Advanced Search Control |
IT Shop |
Control that lets the user run the Advanced Search on Business Roles. |
24f98fbc-3e57-4965-a6fa-791569f59292 | |||
Control | Local Sensitive Functions Grid Control IT Shop | Control that lets the user see a list of local sensitive functions for a given application, business or management role. | 0d069d60-4ff9-44f1-abf5-62860a3da140 |
Page | Management Roles Page ITShop | Page where management roles can be viewed, searched for and requested. |
6fa25996-8e88-4028-9ead-fd7e856f9795 | ||
Control | Shared Folders Unc Path Control IT Shop | Control that lets the user filter |
shared folders against a specific |
All ITShop WebServices
All web services for ITShop
unc path. | 5894a2b2-6676-463e-b210-454811822773 | |
Control | Target System Control IT Shop | Control that lets the user |
filter the application roles |
by a specific |
Application Roles Advanced Search Control (IT Shop)
Control that lets the user run the Advanced Search on Application Roles.
target system. | 098dd81c-c109-449c-913e-56cd529b542a | |
Control | TCodes Grid Control IT Shop | Control that lets the user see |
a list of transaction codes for a given application, business or management role. | f0fe2ba3-3fd5-41b0-bb0a-f06ca0660384 | ||
WebService | All ITShop WebServices | All web services for ITShop | 32578558-ee1f-4930-9786-d4bb13384515 |
Control | Application Processes Control IT Shop | Control that lets the user |
search for application roles against a specific application process | 45a073dc-dbd5-45b4-9823-c611fc5f9bec |
Control | Application Roles |
Account Store Attribute Control |
IT Shop |
Control that lets the user see the |
account store of the application role. |
Application Roles Page (ITShop)
Page where application roles can be viewed, searched for and requested.
1b3e4579-cdd8-48e3-bd35-6c5f4aaf1e2d | ||
Control | Application Roles Advanced Search Control IT Shop | Control that lets the user |
run the Advanced Search on Application Roles. | c53978dc-5966-4c8f-82c0-982dc60bffb7 | |
Control | Application Roles Applications Control IT Shop | Control that lets the user |
filter application roles |
based on applications. | d4b00b50-8a8a-4691-b9be-a2b81c00013b | |
Control | Application Roles Business Functions Control IT Shop | Control that lets the user |
see business functions filter on application roles page. | 45c8f8ff-4abe-461c-bf66-c88a05c2cc02 | |
Control | Application Roles Granted Grid Control IT Shop | Control that lets the user |
see the list of application roles granted. | f86f9c28-6f23-40d2-a8e1-62c4089f51ae |
Control | Application Roles High Level Classification Attribute Control |
IT Shop |
Control that lets the user see the high |
level classification of the |
application role. |
8be9e3b7-90fd-4e53-81e1-2a8bfe65677c | |
Control | Application Roles Name Attribute Control |
IT Shop |
Control that lets the user see the name of the |
application role. |
e4d97e73-e271-4d98-8f14-6d757886c2ab | |
Control | Application Roles Owners Attribute Control |
IT Shop |
Control that lets the user see the owners of the |
application role. |
6d4dd9f8-9c47-4b85-a2be-dfe67ca659b6 | ||
Page | Application Roles Page ITShop | Page where |
application roles can be viewed, searched for and requested. |
d02ce4d3-4534-4b16-9d08-44e8b753487e | ||
Control | Application Roles Resource System Attribute Control IT Shop | Control that lets the user see the |
resource system of the |
application role. |
f5f44c32-fa7d-4591-be83-31a7e9e6f04d | ||
Control | Application Roles TCode Control IT Shop | Control that lets the user |
Business Roles TCode Control (IT Shop)
search application roles via TCode. |
Management Roles Advanced Search Control (IT Shop)
Control that lets the user run the Advanced Search on Management Roles.
29e9c44d-2ff8-4385-bb7c-2504059fc61f | ||
Control | Applications Grid Control IT Shop | Control that lets the user see the |
list of applications. | 4a70f07f-ec3e-4a50-af6c-fa1b45fd5ae2 | ||
Page | Applications Page ITShop | Page where applications ProtectedaApplicationResources can be viewed, searched for and requested. | 4564f746-165c-401e-a5b4-0a100658d7d0 |
Control | Azure Admin Roles Advanced Search Control IT Shop | Control that lets the user |
run the Advanced Search on Azure Admin Roles. | 31e84699-a30e-4e6b-b596-3c67f1768400 | |
Control | Azure Admin Roles Global Functions Control ITShop | Control that lets the user |
Shop for Target Person Control (IT Shop)
Control that lets the user select another user for whom to do assignments of requestable resources.
filter azure admin roles by global functions. | 799bc995-4970-4a61-b0f2-3ada6020c1e5 | ||
Page | Azure Admin Roles Page ITShop | Page where azure admin roles can be viewed, searched for and requested. | 1298d3d7-ae53-4f66-a2b5-1023dd80b462 |
Control | Azure Admin Roles Resource System Attribute Control IT Shop | Control that lets the user |
see the resource system of the azure admin roles. | 130ecb3a-7fde-4c52-a769-b56a27233854 | |
Control | Azure Admin Roles Role Group Type Attribute Control IT Shop | Control that lets the user see the |
role group type of the azure admin roles | fd7f9a7c-175b-489f-b06b-287e673b5b2a | |
Control | Azure Admin Roles Role Type Attribute Control IT Shop | Control that lets the user see the |
role type of the |
azure admin roles. | 47660631-8bc4-4724-9d51-948621dba14a | |
Control | Azure Admin Roles Role Types Control IT Shop | Control that lets the user |
Shop for Target Person Control (IT Shop)
Control which lets the user select another user for whom to do assignments of requestable resources.
Suggested Application Roles Control (IT Shop)
Control that lets the user see the suggested application roles.
IT Shop Workflows
When users interact with the IT Shop and submit requests for groups and Business Roles, they are calling the EmpowerID API to execute a workflow. Depending on the requested role type, EmpowerID processes requests with one of two workflows: The Update Person Direct Assignments workflow for Groups; and, the Update Person Business Roles for Business Roles workflow for Business Roles.
Update Person Direct Assignments Workflow
When a person submits a request for membership in one or more groups, their action initiates the UpdatePersonDirectAssignments workflow. The workflow contains a number of activities and line rules that are invoked to evaluate and process each request submitted by the user.
...
As seen in the above image, the workflow contains six activities and several line rules (depicted by the orange and blue) that direct how the process flows. From a high-level, the process flow is as follows:
Upon starting, the workflow logic flows to the SetAssignments activity. This activity simply retrieves the identity of the person initiating the workflow, gathers each requested Application Role and the details about those requests, including time constraints and whether manager pre-approval is required.
Based on whether manager approval is required, the process flows to either the Manager Pre-Approval activity or the SetApprovedAssignment activity.
If manager approval is required, the workflow notifies the manager and goes into an idle state, awaiting the manager’s decision. After the manager submits their decision, the logic flows to the SetApprovedAssignment activity, which adds all pre-approved roles as target assignments.
Regardless of whether manager pre-approval is required, the next stage of the workflow is to evaluate whether potential SoD Violations need to be checked. If the answer is yes, then the logic flows to the Check for SoD Violations activity.
The Check for SoD Violations activity checks each potential role assignment against current Separation of Duties policies to determine whether adding the role assignment would trigger a violation. If violations would occur, the workflow routes all violating assignments to risk owners for approval and goes into an idle state pending the risk owner’s decision. After the risk owner submits their decision, the logic flows to the SetSODConfirmation activity, which adds all approved roles as target assignments.
Lastly, the logic flows to the Update RBAC Assignments activity, which either updates the role memberships of the user or routes those requests for final operational approval, depending on the delegations of the person initiating the workflow. If the initiator of the workflow does not have the delegations needed to update role membership, the request is routed to all users with the delegations to do so, such as role owners. Once final approval is granted, the updates are committed to the system.
Update Person Business Roles Workflow
When a person submits a request for membership in one or more Business Roles, their action initiates the UpdatePersonBusinessRoles workflow. Like UpdatePersonDirectAssignments, this workflow contains a number of activities and line rules that are invoked to evaluate and process each request submitted by the user.
As shown in Figure 4, the workflow contains six activities and several line rules (depicted by the orange and blue lines) that direct the flow. From a high-level, the process flows as follows:
Upon starting, the workflow logic flows to the systemCodeActivity1 activity. This activity simply retrieves the identity of the person initiating the workflow, gathers each requested Business Role and the details about those requests, including whether the request involves adding or removing roles and whether manager pre-approval is required.
Based on whether manager approval is required, the process flows to either the Manager Pre-Approval activity or the ruleDecisionActivity1 activity.
If manager approval is required, the workflow notifies the manager and goes into an idle state, awaiting the manager’s decision. After the manager submits their decision(s), the logic flows to the ruleDecisionActivity1 activity, which contains operation activities for adding and removing Business Roles to and from people.
If the Business Role is being added to a person, the logic flows to the Assign Operation activity. If the Business Role is being removed from the person, the logic flows to the Unassign Operation Activity. Each operation activity checks to see if the current person in the process has the delegation to assign or unassign the Business Role to and from the target person. If the delegations are present, the role is added to or removed from the person.
If the delegations are not present, the operations are routed for approval and the workflow idles. Once approval is granted the workflow resumes and invokes the Apply Provisioning Policies activity, which executes any provisioning policies related to the adding or removing of the role to and from the person.
Workflow Parameters
Each EmpowerID workflow is represented to users by a special object known as a request workflow. Request workflows control who may initiate a workflow in EmpowerID and are used to store general settings that determine how the workflow runs. One of these settings is the Parameters setting. Parameters are name value pairs that are used for passing data to a workflow when it is initialized, and when a workflow is configured to expect parameters, that data must be supplied to the workflow or an error will occur. In the case of the Update Person Direct Assignments workflow, the workflow is configured with three parameters, while the Update Person Business Roles workflow is configured with just one. These parameters are as follows:
DisableManagerPreApproval – Common to both workflows, this parameter is a Boolean used to specify whether pre-approval by the manager of the workflow’s target person is required. If the parameter is set to false for a workflow, pre-approval is required. When this is the case, that workflow invokes the Manager Pre-Approval activity and goes into an idle state pending the manager’s decision. If the parameter is set to true, pre-approval is not required, and the workflow bypasses the Manager Pre-Approval activity and continues to the next activity.
CheckForSODViolation – This is a Boolean parameter is configured for the Update Person Direct Assignments workflow. If the parameter is set to true, the workflow executes the CheckForSoDViolations activity, which checks each potential Application Role assignment against current Separation of Duties policies to determine whether adding the role assignment to the target person would trigger a violation. If true, the workflow routes all potential violating assignments to risk owners for approval and goes into an idle state pending their decision. If set to false, the workflow bypasses the CheckForSoDViolations activity and continues to the next activity.
CheckSAPSOD – This is a Boolean parameter that is configured for the Update Person Direct Assignments workflow. If the parameter is set to true, the workflow checks each potential Application Role assignment against current Separation of Duties policies to determine whether adding the role assignment to the target person would trigger a violation in SAP. If true, the workflow routes all potential violating assignments to risk owners for approval and goes into an idle state pending their decision. If set to false, the workflow bypasses the check and continues to the next activity.
...
filter azure admin roles by role type. | 01bc26db-6559-4cc6-871b-32af41bde8de | ||
Control | Azure Admin Roles Tenants Control IT Shop | Control that lets the user filter azure admin roles by tenant. | 6fde230f-4dc0-4283-84ee-d773792f6382 |
Control | Azure License Service Plans Section Control IT Shop | Control that lets user see the Azure License Service Plans section in detail view | bbc41813-0c45-4cc6-a22e-6a68a4e712e4 |
Control | Azure Licenses Advanced Search Control IT Shop | Control that lets the user run the Advanced Search on Azure Licenses. | 08d72ac2-57aa-4d2c-9c5c-33e9e059033d |
Control | Azure Licenses License Pool Attribute Control IT Shop | Control that lets the user see the license pool of the azure licenses. | 029eb744-6c2f-407d-af43-e73e1c7be2b7 |
Control | Azure Licenses Licensed Assignee Attribute Control IT Shop | Control that lets the user see the licensed assignee of the azure licenses. | 4685637c-256a-45c3-842e-edf48cadcabb |
Control | Azure Licenses Name Attribute Control IT Shop | Control that lets the user see the name of the azure licenses. | f2604e7e-df64-4593-afd2-1ab5b078c062 |
Page | Azure Licenses Page IT Shop | Page where azure licenses can be viewed, searched for and requested. | 3941c913-c037-4c0f-9268-820324335c23 |
Control | Azure Licenses Price Per Unit Attribute Control IT Shop | Control that lets the user see the price per unit of the azure licenses. | 195f56bb-0b91-47b9-be32-7fa6f61647b9 |
Control | Azure Licenses Resource System Attribute Control IT Shop | Control that lets the user see the resource system of the azure licenses. | 56e136ec-b75e-47aa-a8f4-fd57769ee9b5 |
Control | Azure Licenses Tenant Subscription Attribute Control IT Shop | Control that lets the user see the tenant subscription of the azure licenses. | a87f204b-69e8-4aba-9dbc-c439ec1d2d12 |
Control | Azure Licenses Tenants Control IT Shop | Control that lets the user filter azure licenses against a specific tenant. | d9515288-f659-411c-a160-154569f2dfe4 |
Control | Azure Rbac Roles Global Functions Control ITShop | Control that lets the user filter azure rbac roles by global functions. | 629eb9af-c796-4e73-a128-ad414549abe8 |
Page | Azure Rbac Roles Page ITShop | Page where azure rbac roles can be viewed, searched for and requested. | 86218a80-c161-40a3-8ea9-305ff61f1e57 |
Control | Azure Rbac Roles Role Types Control IT Shop | Control that lets the user filter azure rbac roles by role type. | 3d343ff8-cde9-4492-9100-0596f7519614 |
Control | Azure Roles Applications Control IT Shop | Control that lets the user filter azure roles based on applications. | ea57e24e-9067-40d5-a291-ac36a2ed6010 |
Control | Azure Subscription Control IT Shop | Control that lets the user filter azure licenses against a specific subscription. | e64ac2cf-2755-47f4-a016-40dc06bf6e14 |
WebService | AzureLicenseBundleAPI |
| a446f066-0216-4c03-9867-b058f3c4fe03 |
WebService | AzureLicenseBundleAPI.CheckAssignmentStatus |
| 8ce97a41-39ed-4dd6-94b2-9add65f9577c |
WebService | AzureLicenseBundleAPI.GetAllAssignedLicenseBundlesByAssigneeId |
| d6a94a43-bc16-4bfb-a3ce-4c031661f7b0 |
WebService | AzureLicenseBundleAPI.GetAllAzLicensePool |
| 9470b575-8685-4374-9b89-1c5877450f43 |
WebService | AzureLicenseBundleAPI.GetAllAzLocalServiceBundles |
| 538fb895-c4c0-45f0-bb76-fdb4238cfce7 |
WebService | AzureLicenseBundleAPI.GetAllAzureAdScimResourceSystems |
| 193c259d-d8ab-4f46-83d6-6c0bd9714b40 |
WebService | AzureLicenseBundleAPI.GetAllEligibleLicenseBundlesByAssigneeId |
| ca75deed-4363-4e8c-ba92-2698530ddcba |
WebService | AzureLicenseBundleAPI.GetSingle |
| 431c552c-7d5b-43a4-abf2-eee4ff53a27b |
WebService | AzureLicenseBundleAPI.GetTenantSubscriptionServices |
| e8db8240-fcc2-43a3-a4c4-67408ab18bba |
WebService | AzureRolesAPI |
| da5cfe1b-e87c-4463-a45c-90a3cac3401b |
WebService | AzureRolesAPI.AzureRoleMembers |
| 3f51278c-9e39-4239-91df-18fc6c5e43be |
WebService | AzureRolesAPI.CheckAssignmentStatus |
| 7d3b95e7-905f-4bb7-90a8-0735c4894218 |
WebService | AzureRolesAPI.GetAdTree |
| ec150c2d-eeb9-4ade-8682-14682fc83cb9 |
WebService | AzureRolesAPI.GetAllAssigned |
| a6c43149-5187-4418-8a60-2a591b0b6b20 |
WebService | AzureRolesAPI.GetAzureAdminRoles |
| 7ab3feb2-1c1b-4555-9ba6-60cef186988e |
WebService | AzureRolesAPI.GetAzureRbacRoles |
| 5f967351-1d6c-496f-97a9-c4cb5447abef |
WebService | AzureRolesAPI.GetRoleTypes |
| adcf8f8b-62b9-4a11-9050-c016e36e8b6c |
WebService | AzureRolesAPI.GetSingleAzureAdminRole |
| 9c2e7bee-3877-4627-b344-c96d573fd4b4 |
WebService | AzureRolesAPI.GetSingleAzureRole |
| 56384dad-c824-4f62-941c-582f8ab1b45a |
Control | Business Domains Control IT Shop | Control that lets the user search for business roles against a specific business domain. | 82c21d02-1786-4650-9a5c-c844c4a98134 |
Control | Business Functions Control IT Shop | Control that lets the user search for business roles against a specific business function. | 7e811a70-057a-42df-bdfa-75bd022a4cce |
Control | Business Roles Applications Control IT Shop | Control that lets the user filter business roles based on applications. | 6e0c8868-fdd7-4a78-95ab-66a568438513 |
Control | Business Roles Business Functions Control IT Shop | Control that lets the user see business functions filter on business roles page. | 4b8dd0b4-8ad1-42c1-89e4-6976d1fb5afc |
Control | Business Roles High Level Classification Attribute Control IT Shop | Control that lets the user see the high level classification of the business role. | d66673a6-7786-4129-a06d-018c7c5534d4 |
Control | Business Roles Name Attribute Control IT Shop | Control that lets the user see the name of the business role. | be83af20-7105-4608-88ef-076f21a84770 |
Control | Business Roles Owners Attribute Control IT Shop | Control that lets the user see the owners of the business role. | 9f0161e4-3727-48d7-a97a-90365816af76 |
Page | Business Roles Page ITShop | Page where business roles can be viewed, searched for and requested. | d2eed453-2995-4a5d-aefb-bbb52cf7d469 |
Control | Business Roles Parent Business Role Attribute Control IT Shop | Control that lets the user see the parent business role of the business role. | e6a72be9-afd5-4402-ac83-97118313630b |
Control | Business Roles Role Approvers Attribute Control IT Shop | Control that lets the user see the role approvers of the business role. | 119b923a-08f5-464f-ab2c-9552286864eb |
Control | Business Roles TCode Control IT Shop | Control that lets the user search business roles via TCode. | 588efa11-41da-4078-b8a1-be31f328f57f |
WebService | BusinessFunctionsAPI |
| ab1df741-0568-4074-bc6d-634ee44b19de |
WebService | BusinessFunctionsAPI.GetAnonymousInfo |
| a17c7e45-6d7a-4bf8-ade0-42a7c31b76a2 |
WebService | BusinessFunctionsAPI.GetFunctions |
| a3b4fecf-7359-4f3b-8372-b6b3235f813a |
WebService | BusinessFunctionsAPI.GetGlobalRights |
| 06e5c905-ea5d-4b57-9cc8-77e3c5ed3df6 |
WebService | BusinessFunctionsAPI.GetUser |
| 32b1330d-6d02-474a-a8f4-fea9aebd6e15 |
WebService | BusinessFunctionsAPI.GetUserGroups |
| d8911f11-65e4-4752-8ac3-a1fffac6f7af |
WebService | BusinessFunctionsAPI.GlobalFunctionsByOrgRole |
| 23981a53-c165-42d1-a2a6-7996e1a3d24c |
WebService | BusinessFunctionsAPI.LocalFunctionsByAppRole |
| eb70fc3c-84b3-44f6-a2c9-537e10eaa2f2 |
WebService | BusinessFunctionsAPI.LocalFunctionsByAssignee |
| b54bc18f-d17d-4d78-b86c-ca8639b1cfe1 |
WebService | BusinessFunctionsAPI.LocalFunctionsByOrgRole |
| 77a57a18-d72b-4563-964a-ba66f717acd2 |
WebService | BusinessFunctionsAPI.LocalFunctionsByOrgRoleOrgZone |
| ace31d30-85bc-4bdc-87f1-058198eff3f7 |
WebService | BusinessFunctionsAPI.LocalFunctionsByRole |
| 8bfd2e40-f7a6-4876-b1f6-2f83b36ecd86 |
WebService | BusinessFunctionsAPI.LocalRightsByAssigneeId |
| b5e6548e-c506-4b00-beec-a19adc977a5d |
WebService | BusinessLocationsAPI |
| 74ea875d-bbe5-497b-b516-613f3add3f54 |
WebService | BusinessLocationsAPI.ExecuteMethod |
| f1dbfef5-7db9-454e-8347-ae9888e4a8ba |
WebService | BusinessLocationsAPI.GetAnonymousInfo |
| 8b47ddd1-6b2b-4f52-af68-9e92eb88cab8 |
WebService | BusinessLocationsAPI.GetChildren |
| 4c2e1870-8ed9-4257-9884-5bdd13587358 |
WebService | BusinessLocationsAPI.GetChildrenByOrgZoneGUID |
| 560de00e-0201-4ce3-b238-56da45435aa6 |
WebService | BusinessLocationsAPI.GetEligibleLocation |
| db539303-1b7e-4220-aa0a-ee7bb9d355b7 |
WebService | BusinessLocationsAPI.GetOrgZonesByOrgZoneType |
| 3c668a12-03b0-481d-b3b9-f22bb7f4db8a |
WebService | BusinessLocationsAPI.GetOrgZoneTypes |
| 58c8ba7a-364d-4786-b52b-19728ee0df5c |
WebService | BusinessLocationsAPI.GetUser |
| d1a6023d-5469-405b-b139-f78aa0f04d59 |
WebService | BusinessLocationsAPI.GetUserGroups |
| 71959d80-2d9d-4e13-8b22-6c0a0796e54c |
WebService | BusinessLocationsAPI.Search |
| 5f8b0c83-1591-4e84-a48d-75b07f44dc35 |
WebService | BusinessRolesAPI |
| 0418bca1-7fd3-4af9-a6f5-e327480fc4ab |
WebService | BusinessRolesAPI.ApproversByRoleId |
| aa9b6811-3dc8-4ad6-8f67-f58426353056 |
WebService | BusinessRolesAPI.CheckAssignmentStatus |
| f1c6b81b-cba5-4457-8b6f-9119b10cb7e2 |
WebService | BusinessRolesAPI.ExecuteMethod |
| a1dd563e-716d-462f-a6a2-104b6b6030ac |
WebService | BusinessRolesAPI.GetAnonymousInfo |
| 9b1cf2dc-7795-4d58-885f-842c9b03855a |
WebService | BusinessRolesAPI.GetApplicationRoleTemplates |
| 8895a7d4-8808-49da-804f-606e3ff50537 |
WebService | BusinessRolesAPI.GetAssignedAppRolesByPersonGUID |
| 4b9a80c1-0eec-49f0-b278-f168488b0b37 |
WebService | BusinessRolesAPI.GetAssignedBusinessRolesByPersonGUID |
| e6e738b8-d592-4399-960c-626d495c9e2a |
WebService | BusinessRolesAPI.GetOrgRole |
| 79278a00-8cac-42c8-91fb-de15fa0531de |
WebService | BusinessRolesAPI.GetOrgRoles |
| a6d3f032-1f60-495c-9655-079290778a1c |
WebService | BusinessRolesAPI.GetOwnersAndApprovers |
| 43dc78e8-3a05-4aee-a8b4-bb463ee76dad |
WebService | BusinessRolesAPI.GetSingleOrgRole |
| dc9ae0c6-6455-4f59-9949-4a40d614a6d5 |
WebService | BusinessRolesAPI.GetUser |
| f537c211-fe35-4d34-9038-5a0a6072c712 |
WebService | BusinessRolesAPI.GetUserGroups |
| 8c69602b-95c5-4d73-b121-c117699650db |
WebService | BusinessRolesAPI.OwnersByRoleId |
| e75ba3e7-432d-4a0d-a9e1-17aba932bccc |
Control | Cart Due Date Control IT Shop | Control that lets the user set a due date for the cart. | da3bb867-42a5-4ef5-a38c-1d238fbbb493 |
WebService | CartSubmissionAPI |
| 0d8099c8-b81f-4db6-bc3e-76b81a5d0b5f |
WebService | CartSubmissionAPI.BusinessRequestTypes |
| f020ed53-06b9-406a-9bb0-798eda20eb73 |
WebService | CartSubmissionAPI.DefaultApprover |
| 790beb82-6402-4841-b9a5-07c537196191 |
WebService | CartSubmissionAPI.GetAnonymousInfo |
| 5d84aa04-d421-419a-ad52-39e807f5171d |
WebService | CartSubmissionAPI.GetCartItemResults |
| d3595909-6764-46f2-9a44-084e72b1b1dc |
WebService | CartSubmissionAPI.GetUser |
| a4a3bc48-945c-468f-b173-2e5ea93ffa1a |
WebService | CartSubmissionAPI.GetUserGroups |
| 3d16d688-e102-4d37-a4b8-ef867d9cdeca |
WebService | CartSubmissionAPI.ProcessAzureAdminRoles |
| 5c58e4a2-fd2f-4d80-b9e3-7a4a1b269500 |
WebService | CartSubmissionAPI.ProcessGroups |
| 4ed2d1f9-624c-4e28-8b82-6a0001b5b8ad |
WebService | CartSubmissionAPI.ProcessLicenseBundles |
| b36ac651-b896-488c-b4ac-3999963e101b |
WebService | CartSubmissionAPI.ProcessManagementRoles |
| e01ad26f-3375-4aa2-8483-628e6433bca9 |
WebService | CartSubmissionAPI.ProcessOrgRoles |
| aab5138a-d671-4033-97e9-77d6fcb53bbf |
WebService | CartSubmissionAPI.SubmitCart |
| 7149787c-d640-4747-b462-3abb44111f81 |
WebService | CartSubmissionAPI.SuggestedApprovers |
| b341eaa8-53a0-48b6-a0bc-7e1182546b24 |
RBACObject via API | CatalogCategoryView | CatalogCategoryView | bce4d668-f274-4991-b96f-14381be3e135 |
WebService | CheckForSODAPI |
| 468a0b9f-0532-48e8-8b7f-40d99f0b862c |
WebService | CheckForSODAPI.CheckForSOD |
| 3fce6585-5eed-4c54-8ae5-80d416b0abc1 |
WebService | CheckForSODAPI.ExecuteMethod |
| 15225e22-c9f9-4dc2-bc8e-5f683e9eaed8 |
WebService | CheckForSODAPI.GetAnonymousInfo |
| 86f24bdc-34c2-4212-92a0-98cb1c82c8d2 |
WebService | CheckForSODAPI.GetAssigneesForOrgRoleType |
| ed48f7b3-ebce-4fe6-bbb9-b496627b3526 |
WebService | CheckForSODAPI.GetUser |
| 5b5f1972-26ad-47b3-ad43-f045c45ac64d |
WebService | CheckForSODAPI.GetUserGroups |
| cf25bba9-b9b0-456e-b636-74aee653a595 |
Control | Computer Operating System Control IT Shop | Control that lets the user run the Operating System filter on Computers | 17e3fea4-881a-4a49-8e3f-7645ef062e52 |
Control | Computers Advanced Search Control IT Shop | Control that lets the user run the Advanced Search on Computers | bcd6559d-c5b2-4974-b299-abd56cc91153 |
Control | Computers Environment Control IT Shop | Control that lets the user run the Environment filter on Computers | d37b0c3a-23a8-4734-9a15-a5bc0ffc8b8d |
Control | Computers Instance Type Control IT Shop | Control that lets the user run the Instance Type on Computers | dd64f58a-0be4-4613-9b05-065572d666ff |
Page | Computers Page ITShop | Page where computers can be viewed, searched for and requested. | 0d4d4cff-7832-4e44-adf6-9c15ebc85b9e |
WebService | ComputersAPI.GetAllAssignedComputers |
| da409a1f-2d3b-4f52-8060-229e0c6299ef |
WebService | ComputersAPI.GetAllComputers |
| 94d27749-e7ce-4943-8e10-ea19a138c5b9 |
WebService | ComputersAPI.GetComputerOperatingSystemTypes |
| 08bcd977-d982-4902-aacf-24b99ead0675 |
WebService | ComputersAPI.GetComputerPlatformTypes |
| 4b2080a0-9096-4420-8a14-1e9e583cdae7 |
WebService | ComputersAPI.GetComputerRequestableDetailOptions |
| fdc44a97-691f-492f-9148-11f4021eb7a8 |
WebService | ComputersAPI.GetComputersForLoginSessionAccess | ComputersAPI.GetComputersForLoginSessionAccess | 44cf46f7-7b89-4137-a869-a1dde4580c1f |
WebService | ComputersAPI.GetITEnvironmentTypes |
| 50a36e20-e923-485c-96b9-8e14dcd81d9c |
WebService | ComputersAPI.GetLoginSessionHistory | ComputersAPI.GetLoginSessionHistory | c01ed2a9-3492-4cee-b483-e775eff4607f |
WebService | ComputersAPI.GetLoginSessionHistoryDetails | ComputersAPI.GetLoginSessionHistoryDetails | eebd181c-0974-497a-a312-22c98d2c0f3c |
WebService | ComputersAPI.GetSingleComputer |
| 042c66fe-b603-4540-a8d2-08ef37e01206 |
Control | Create Azure Application Workflow Control IT Shop | Control that lets the user create an azure application via EID workflow within ITShop. | 4cc8258c-544b-4be4-baf7-f5337c089593 |
Control | Credentials Advance Search Control IT Shop | Control that lets the user run advance search on Credentials | d0a9650e-54ee-452f-90ad-f85fb5fd3565 |
Control | Credentials Show Pre Approved Filter Control IT Shop | Control that lets the user filter based on Pre Approved | 8812a2fe-0efa-407c-b1b7-da58681c2844 |
WebService | ExternalCredentialsAPI.CheckInCredential |
| 7a8a1191-d47b-4128-aab0-8ac4caa12722 |
WebService | ExternalCredentialsAPI.GetAllAssignedExternalCredentials |
| 719bf9a6-e080-4e8a-8759-f48e3c651b04 |
WebService | ExternalCredentialsAPI.GetAllExternalCredentials |
| 2decbf07-b8c4-491b-a615-906fe923ba4a |
WebService | ExternalCredentialsAPI.GetByComputerId |
| 207157b5-925b-45d6-9292-a9d05be83b7c |
WebService | ExternalCredentialsAPI.GetCheckedOutByComputerIdPersonId |
| f7393f9e-24b8-4234-b38d-cd57e60fb8fb |
WebService | ExternalCredentialsAPI.GetCheckedOutByPersonId |
| da3414ee-d6bc-47dc-ac66-f41e828584f0 |
WebService | ExternalCredentialsAPI.GetCheckedOutRecords |
| d5de91bb-a23d-47f7-ad9e-2803c32eca5f |
WebService | ExternalCredentialsAPI.GetExternalCredentialProxy |
| b6b1a3de-cbe7-4e3e-8c52-ca469a9ae852 |
WebService | ExternalCredentialsAPI.GetSingleExternalCredential |
| e2103560-5615-4d0f-814b-6d21ee04deab |
WebService | ExternalCredentialsAPI.ValidateMasterPassword |
| da8d88e1-a267-4dd0-abec-e51de4e40017 |
WebService | GroupsAPI |
| 8827d4e6-2ca9-4839-837e-dc8914b56ae2 |
WebService | GroupsAPI.ApproversByAppRoleId |
| ffff786f-406a-4b6b-ad5d-a1fa5e1e4190 |
WebService | GroupsAPI.CheckAssignmentStatus |
| 60c89015-ad3b-48d6-9bf1-5c1954f03a35 |
WebService | GroupsAPI.GetAnonymousInfo |
| c1b32afb-d533-4993-a6b6-357aeb980fce |
WebService | GroupsAPI.GetAssignedAppRolesByPersonGUID |
| 38c1c026-f91a-4815-9157-7ec19aab416e |
WebService | GroupsAPI.GetAssignedMembershipByAssigneeId |
| 15f63079-1764-4837-85f9-9de13a619016 |
WebService | GroupsAPI.GetAssignedMembershipByOrgRoleOrgZoneID |
| 95e79e3a-1b49-4b90-8354-51427de7aebe |
WebService | GroupsAPI.GetGroups |
| 6e73c794-c0a2-4671-bc58-e84d7f9f4303 |
WebService | GroupsAPI.GetOwnersAndApprovers |
| 5d6f17cb-9b0b-461e-acad-cbd77f804b23 |
WebService | GroupsAPI.GetSingleOrgRole |
| 2705b835-45f7-4f57-920c-eb4e9e2b9e0c |
WebService | GroupsAPI.GetSuggestedAppRolesByAssigneeId |
| bf4e7c47-9332-4d18-9a58-b1d5420d802f |
WebService | GroupsAPI.GetSuggestedAppRolesByOrgRoleIdOrgZoneId |
| 17b34d6a-a4d7-4906-a3a1-66d1bf0167b8 |
WebService | GroupsAPI.GetTargetSystemFilterdata |
| 046b6a55-965a-4457-88a6-46af12fee20c |
WebService | GroupsAPI.GetUser |
| 1e81fb25-37a5-455d-bffc-336f05722ffb |
WebService | GroupsAPI.GetUserGroups |
| 41cbea9f-07be-495b-9bb6-66865f8ac258 |
WebService | GroupsAPI.OwnersByAppRoleId |
| 67184772-3dd0-4176-9d6e-c8d24ca0a246 |
Application | IT Shop Microservice App | IT Shop - shopping cart access request microservice application | c9ed011f-6f1a-4830-a035-6afb1bd50040 |
Page | ITShop Credentials Page | Page where credentials can be viewed and searched for. | 29414259-9384-4ac8-8ffb-e4af28831974 |
Control | ITShop Parsed Html More information text Control | ITShop Parsed Html More information text Control | d52310b4-8336-4b4d-8f32-bed7a6ee17f5 |
Control | ITShop Show Only Azure Applications Control | Controls if only Azure apps should show | 5a86c1b9-393a-454c-a992-13e396c7d430 |
Control | ITShop Workflow Tab Control | Controls that shows or hides the Workflow tabs for each resource type in ITShop | c7cb6341-aa03-47aa-bb3c-19c4c35eb42a |
Control | ITShop-DirectAssignedApplicationRoles-Control | Filter DirectAssigned ApplicationRoles | e70f08fc-a72b-4da3-897c-128d6f162579 |
Control | ITShop-DirectAssignedAzureAdminRoles-Control | Filter DirectAssigned Azure Admin Roles | 7f73ecc7-8104-4b7a-9d7b-0a99575a084a |
Control | ITShop-DirectAssignedAzureLisences-Control | Filter DirectAssigned AzureLisences | 57cc565e-6b42-401c-8f58-fe8474f7e71f |
Control | ITShop-DirectAssignedBusinessRoles-Control | Filter DirectAssigned BusinessRoles | d461c905-d65e-46a2-9c78-47950abe5b6a |
Control | ITShop-DirectAssignedCredentials-Control | To control visibility of DirectAssignedCredentials filter for Credentials | 116b72e4-3692-4d5f-92bf-05f4000cdac0 |
Control | ITShop-DirectAssignedManagementRoles-Control | Filter DirectAssigned Management Roles | 5bd34411-3074-402f-9a78-ad18bdc8e287 |
Control | ITShop-ExpiringCredentials-Control | Control that lets you filter credentials that are expiring | d79768e2-c5d9-4542-8dde-4b7bbaacf92c |
Control | ITShop-PreApprovedApplications-Control | Filter PreApproved Applications | 0854af17-8c20-400a-a08b-cc4752fb576a |
Control | ITShop-PreApprovedComputers-Control | Filter PreApproved Computers | 34b2cb6a-a284-4d08-bbaf-61fdd6cc37a9 |
Control | ITShop-PreApprovedMailboxes-Control | Filter PreApproved Mailboxes | bbf7aec4-c8d6-4bd8-a658-b05e500f1997 |
Control | ITShop-ShowManageAccessFiltersBar-Control | Control to show/hide Manage Access Top Filters Bar | 7beff97f-a993-44fa-8ff0-acae5c3f454a |
Control | ITShop-TimeConstrainedApplicationRoles-Control | Filter TimeConstrained ApplicationRoles | 0cdd50c6-8de4-45ac-a537-758b5a6e9b54 |
Control | ITShop-TimeConstrainedApplications-Control | Filter TimeConstrained Applications | 44b501c5-b0d0-42ec-8df6-a067436df957 |
Control | ITShop-TimeConstrainedAzureAdminRoles-Control | Filter TimeConstrained Azure Admin Roles | aac14eac-adf6-41d8-880a-8e09bebdc6c9 |
Control | ITShop-TimeConstrainedBusinessRoles-Control | Filter Time Constrained Business Roles | 9a2d44c5-5d31-4a4d-80e5-e588878eb335 |
Control | ITShop-TimeConstrainedComputers-Control | Filter TimeConstrained Computers | ffe9b5b9-3d9c-4413-bde4-7e724e682f84 |
Control | ITShop-TimeConstrainedCredentials-Control | Control that lets the user filter time constrained credentials | 8e1542dc-8677-4b2a-a6cb-0dbb7a62578a |
Control | ITShop-TimeConstrainedMailboxes-Control | Filter TimeConstrained Mailboxes | 7dcef6d4-41b5-4c9f-9551-0f1c7e0fa824 |
Control | ITShop-TimeConstrainedManagementRoles-Control | Filter Time Constrained Management Roles | 304af788-5453-409e-b8be-245294fb51fb |
Control | ITShop-TimeConstrainedSharedFolders-Control | Filter TimeConstrained Shared Folders | 51aaf9ae-89d8-4aa5-95f1-0ad6ca865777 |
WebService | LocalizationAPI |
| 6e274538-1855-4a96-a8b0-739ba4a8e3ba |
WebService | LocalizationAPI.CountryHelpText |
| fe216c72-ffbb-48c1-a1dd-f700b87228c8 |
Page | Mail Boxes Page ITShop | Page where mail boxes can be viewed, searched for and requested. | 7b7d546e-7e12-4062-a1b1-4c34871555c6 |
Control | Mailboxes Advanced Search Control IT Shop | Control that lets the user run the Advanced Search on Mailboxes. | bec4dc8c-205f-4034-8166-dced7535cb74 |
Control | Mailboxes Mailbox Type Control IT Shop | Control that lets the user filter mailboxes by mailbox type. | b46fa91e-fc9f-4df0-87a7-55d8e9842670 |
WebService | MailBoxesAPI.GetAllAssignedMailBoxes |
| fc30be29-7b2e-4524-b547-87e70d371613 |
WebService | MailBoxesAPI.GetAllMailBoxes |
| ea16d2d7-8af6-4daf-8560-e4e19a9dee50 |
WebService | MailBoxesAPI.GetAllMailBoxTypes |
| 46bfd610-b6fd-46d8-ac92-057369a3eaff |
WebService | MailBoxesAPI.GetSingleMailBox |
| 7b024ad4-d33b-473a-a589-53f7c811ec9b |
Control | Manage Access Business Request Attribute Control IT Shop | Control that lets the user see the business request name in the details of an access. | ae4896b6-6f36-4be9-b94c-fa26b802e8d3 |
Control | Manage Access View Pending Access Control IT Shop | View Pending Access control for Manage access screen in ITShop | 6f207e84-e8b2-4e16-94d6-68ddc0a0a0d5 |
Control | Manage Access Workflow Id Attribute Control IT Shop | Control that lets the user see the Workflow ID and URL for a given resource. | f193ea96-f364-4adc-89b4-5e13369770ac |
Control | Management Roles Advanced Search Control IT Shop | Control that lets the user run the Advanced Search on Management Roles. | e36d5a25-3f34-4dfb-bc4a-e13d3cd526c2 |
Control | Management Roles Applications Control IT Shop | Control that lets the user filter management roles based on applications. | d7242ef6-b01f-43ac-887a-61f5b66b42e2 |
Control | Management Roles Business Functions Control IT Shop | Control that lets the user see business functions filter on management roles page. | 769b294e-6e6b-46f1-b7c2-759451201cba |
Control | Management Roles Granted Grid Control IT Shop | Control that lets the user see a list of management roles granted. | 76b3b0ab-340a-4ebc-93d1-db1cdeaebebd |
Control | Management Roles Name Attribute Control IT Shop | Control that lets the user see the name of the management role. | e0283532-b46e-4330-ba57-34809f78c294 |
Control | Management Roles Owners Attribute Control IT Shop | Control that lets the user see the owners of the management role. | 0e97af74-7db3-4290-96c8-801d8e2226b4 |
Control | Management Roles TCode Control IT Shop | Control that lets the user search management roles via TCodes. | 2be850d4-4ef6-41bd-9b9c-11a9f48deb20 |
Control | Management Roles Type Friendly Name Attribute Control IT Shop | Control that lets the user see the type friendly name of the management role. | 49be3df2-cdac-440f-8bb5-ff5f3ccde22b |
WebService | ManagementRolesAPI |
| 21b9eb49-435a-460c-aca2-a119720cd84a |
WebService | ManagementRolesAPI.CheckAssignmentStatus |
| 75fd9589-6b28-44ce-a4fe-b5089718c283 |
WebService | ManagementRolesAPI.GetAllAssigned |
| 8701e48b-132f-46c6-8950-e50d76078918 |
WebService | ManagementRolesAPI.GetAllAssignedByManagementRoleId |
| 451fcb98-dc19-4f4c-9919-6445bb1e92ee |
WebService | ManagementRolesAPI.GetAllAssignedByOrgRoleOrgZoneId |
| b57fece7-fbe1-44fc-a355-9182a55599f1 |
WebService | ManagementRolesAPI.GetManagementRoles |
| 598032ae-703f-42c0-8f98-57f0fd9d002e |
WebService | ManagementRolesAPI.GetSingleManagementRole |
| 9c29ad2e-6345-4439-b430-4f1dcc16c9cf |
WebService | ManagementRolesAPI.GetSuggestedManagementRolesByAssigneeId |
| 642f2a31-231e-40f1-b5b1-0c4280a335c3 |
WebService | ManagementRolesAPI.OwnersByManagementRoleId |
| d2f4f20b-bb33-4f61-bc77-377c94a47cfc |
Control | Pre-Approved Application Roles Control IT Shop | Control that lets the user see the pre approved roles. | aee9eb0b-262a-471f-b6c7-a5d0cd4f9b39 |
Control | Pre-Approved Business Roles Control IT Shop | Control that lets the user see pre approved roles. | 56c54a5b-c8cc-41f0-ae01-e69d8a20154b |
Control | Pre-Approved Management Roles Control IT Shop | Control that lets the user see pre approved roles. | d7356cc8-1172-42ef-8a10-3e74fdb85fa5 |
WebService | ProtectedApplicationsAPI.GetAllAssignedProtectedApplications |
| eec4c67a-fec6-4db3-b866-b59c37a9c988 |
WebService | ProtectedApplicationsAPI.GetAllAzureApplications |
| 4dbebf0a-984d-4383-b742-23cc9acc6f0d |
WebService | ProtectedApplicationsAPI.GetAllProtectedApplications |
| 6f16e025-a612-4312-8417-8f874d330419 |
WebService | ProtectedApplicationsAPI.GetOwnersOrDeputies |
| 1ccfcf4f-4af3-4365-bd79-e699809650c2 |
WebService | ProtectedApplicationsAPI.GetSingleAzureApplication |
| 40e6ffed-b96d-49c3-a7f6-d8a948994092 |
WebService | ProtectedApplicationsAPI.GetSingleProtectedApplication |
| 46f69a70-615e-4dc1-9127-a7de07a0bfbf |
WebService | ProtectedApplicationsAPI.GetSupportedResourceTypes |
| ca20a154-2285-4ed0-a2b6-616fd857c8fe |
WebService | RaManagementRoles.GetAllManagementRoles |
| 5e3b72a7-81d2-4d8c-bf32-d86f0d727291 |
WebService | RaManagementRoles.GetSingleManagementRole |
| 02e4bb05-8af6-4a4a-b6b1-3589d0cbd414 |
Control | Reassign Cart Approver Control IT Shop | Control which lets the user reassign the cart approver. | c7122ccc-ade4-4b55-a5fd-60a4b14ee33d |
Control | Resource"s Access Request Policy Control IT Shop | Control that lets the user see the access request policy associated with a given resource. | e3ef5d6b-13dc-4ec2-ab1f-7d424743cf3e |
Control | Shared Folders Advanced Search Control IT Shop | Control that lets the user run the Advanced Search on Shared Folders. | 60b0c224-33e9-454a-8357-48436ff1a9ea |
Page | Shared Folders Page ITShop | Page where shared folders can be viewed, searched for and requested. | 5cdbac32-e1c7-4212-8cf0-88082a82601f |
WebService | SharedFoldersAPI.GetAllAssignedSharedFolders |
| e4fe5a0e-3068-48c5-9cd0-e9194d350641 |
WebService | SharedFoldersAPI.GetAllSharedFolders |
| 28323ed2-d915-4b7e-b819-48b9eb6e7786 |
WebService | SharedFoldersAPI.GetSingleSharedFolder |
| dbb54870-1a03-418b-a776-bd7ded34b8bd |
WebService | SharepointAPI.GetAllWebSites |
| 85c4caad-d9d1-4224-8997-1983477462b9 |
WebService | SharepointAPI.GetSingleWebSite |
| b8b152b3-32d1-450e-a310-ab26ef25e52d |
Control | Shop By Applications Control IT Shop | Control that lets the user shop by applications. | 7669cb52-079d-4053-bb15-0ce6428205df |
Control | Shop By Applications Control IT Shop | Control that lets the user shop by applications. | 9b8483de-382c-46a5-8f7b-c6087ffd72ad |
Control | Shop By Reference Person Control IT Shop | Control that lets the users shop for requestable resources by a reference person. | 5ec87ad7-7e16-415d-9267-e66915a050c8 |
Control | Shop For Target Person Control IT Shop | Control which lets the user select another user for whom to do assignments of requestable resources. | b2e9e529-3027-4a8c-893c-abae169cf9cb |
Control | Show Cart Approver Control IT Shop | Control that lets the user see approver control in the cart. | 245854bf-87ab-4d62-a6fa-af31b53136db |
Control | Show Guided Shop for first time login IT Shop | Control that shows the Guided Shop when the user signs in for the first time. | 6fa28aa7-166a-43c8-9ad5-36f4f2437915 |
Control | Simple Text Search Control IT Shop | Control that lets the users filter resources using the simple text search. | 8a97490b-7318-43fa-bf8e-da6ed506b4f1 |
Control | Suggested Application Roles Control IT Shop | Control that lets the user see the suggested application roles. | 381f93b4-4eda-44af-a7e3-600a2f000d21 |
Control | Suggested Business Roles Control IT Shop | Control that lets the user see the suggested roles. | d6db5647-6c4f-43ba-b6f8-c48fe7d6e57f |
Control | Suggested Management Roles Control IT Shop | Control that lets the user see the suggested management roles. | ce2b0dee-faf8-4bef-98af-d971dc9bceb2 |
Control | Suggested Management Roles Grid Control IT Shop | Control that lets the user see the list of suggested management roles | 35e127e9-bdd4-4bb2-89cd-14b59689bdcc |