...
The IAM Shop, a microservice provided by EmpowerID, allows users to request access to IT resources. Users can view their current resources and request additional access based on their job functions. They can search for specific roles, request access, and even set time constraints for their requests. Requests are stored in the user's cart until they are submitted or removed. Users can review the resources in their cart, provide a justification, and submit the request for approval.
Eligibility
To ensure a seamless end-user experience and prevent non-compliant access requests, it is crucial to control the resources that different users can view and request. EmpowerID offers a powerful policy engine called "Eligibility" to manage which users can view and request these items in the IAM Shop. Eligibility policies can be applied to users based on various criteria and can be classified as inclusion rules or exclusion rules.
...
Approvals and Approval Routing
Original
EmpowerID includes a powerful approval routing engine and friendly end-user interfaces for task tracking and decisions. As discussed above, Eligibility policies are considered when calculating if a request requires approval and if so, how many approval steps and to whom the tasks should be assigned at each step. Determination of the approval process is dynamic and considers the roles of the requestor, the sensitivity of the items being requested, and an organization’s risk and Segregation of Duties (SoD) policies. Based on these factors, approval for a requested item may not be required or it could require multiple levels of approval and an additional SoD approval by a risk owner.
Approvers are notified via configurable and localized email notifications with reminder emails configured based on flexible policies. All decisions at each step in the process are logged and traceable up to and including the final fulfillment of access.
...
EmpowerID's approval routing engine is a powerful tool that ensures that only authorized users have access to sensitive resources. As mentioned earlier, Eligibility policies are taken into account when determining if a request requires approval and, if so, the number of approval steps and the assignees for each step. The approval process is dynamically calculated, considering the requester's roles, the sensitivity of the requested items, and the organization's risk and Segregation of Duties (SoD) policies. Depending on these factors, a requested item may not require approval, or it could necessitate multiple levels of approval and additional SoD approval from a risk owner.
...
| Macrosuite divider macro | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|