Credentials are encrypted usernames and passwords for privileged accounts that your organization has vaulted. When users request credentials, they request to "check out" them. Users can see and use those credentials for a specified period if the request is approved. This article demonstrates how users can request credentials within EmpowerID.
Prerequisites
Users must have a master password to request access to credentials. For details on creating a master password, see the Creating Master Passwords article.
Procedure
Step 1 – Locate the Desired Credential
Log in to the IAM Shop portal.
From the Resource Type dropdown, select Credentials.
Search for the credential you want to request.
Click the Request Access button next to the shared credential.
This opens the request card for the credential.
Step 2 – Choose the Access Type
In the request card, select the desired Access Type:
One Time Access – Choose this option for a one-time credential checkout.
Pre-Approved Access – Choose this option if you need regular access to the credential.
Click Unlock.
Step 3 – Enter Master Password
Enter your master password in the prompt.
Click OK.
Step 4 – Adjust Access Duration (One-Time Access Only)
If you selected One Time Access, adjust the following fields as needed:
Start Date
Start Time
End Date (required to enable the "Add to Cart" button)
End Time
Click Add to Cart.
Step 5 – Complete the Request
Click the Cart icon at the top of the page to open it.
Select a reason for the request.
If you selected Other, enter a comment.
Click Evaluate Request. This allows the system to check for potential risk violations if the credentials were granted.
Enter a Business Request Name. The text entered here helps identify the purpose of the request to potential approvers.
Enter a comment in the Add a Comment field.
Optionally, enter a Due Date.
Click Submit.
Results
After submission, you should see a confirmation message stating that the cart was successfully submitted and a tracking link.
Clicking the link opens the request in the My Tasks app, where users can interact with the request and do the following:
Cancel the request
View the user’s functional access
View Approvers
Add comments