You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.

Overview of the IT Shop

The IT Shop makes requesting access to resources easy. Instead of navigating throughout the Web site looking for a specific resource—like an application, a role or a group, or a hard asset like a laptop—you can go to the IT Shop. The IT Shop allows you to quickly see what resources you currently have access to and shop for more—both for yourself and for others. You simply search for what you want and put it in your cart. Once an item is placed in the cart, it stays in the cart until you check out or remove it. In this way, you can go about your business, navigating away from the IT Shop and even logging out of the EmpowerID Web application without losing the contents of your cart. When you are ready to checkout, that is, submit your access request(s), you review the items in your cart, add a reason for requesting those items and click Submit. Your requests then route for approval—first to managers and then to those with the RBAC delegations needed to make the final decision.



IT Shop Pages

The IT Shop contains the following four pages.

Request Access

The Request Access page (shown in the image above) contains all resources that have been published to the IT Shop. This page is the page you see when shopping for resources. From this page, you can search for and request access to any resources in the shop. Once your requests are in your cart, you simply submit them and wait for a response. If you have been given the delegations needed to access the resources without needing approval, the EmpowerID system grants you immediate access.

Resources in the IT Shop are divided by resource type (applications, roles, computers, groups, etc.) to allow you to filter the items for which you are shopping. You can tell which filter is being applied to the IT Shop by the image associated with the search field. To change the filter, you select the image that represents the resource type. These filters are as follows:

Filter ImageFilter

This is the unfiltered or default view of the IT Shop. When you see this filter in the IT Shop search field, your search returns all published resources having the searched for parameter. Thus, if you pass in "Bike Team" as your search parameter and there is a shared folder named "Bike Team," a mailbox named "Bike Team," and a group named "Bike Team," all three resource items are returned.

This is the Business Role filter. When you see or apply this filter to the IT Shop search field, your search returns published Business Roles only.

This is the application filter. When you see or apply this filter to the IT Shop search field, your search returns published applications only.

This is the computer filter. When you see or apply this filter to the IT Shop search field, your search returns published computers only.

This is the Exchange mailbox filter. When you see or apply this filter to the IT Shop search field, your search returns published mailboxes only. 


This is the group filter. When you see or apply this filter to the IT Shop search field, your search returns published groups only. 


This is the Management Role filter. When you see or apply this filter to the IT Shop search field, your search returns published Management Roles only. 


This is the Shared Credential filter. When you see or apply this filter to the IT Shop search field, your search returns published Shared Credentials only. 

This is the Shared Folder filter. When you see or apply this filter to the IT Shop search field, your search returns published shared folders only. 


This is the SharePoint Web Site filter. When you see or apply this filter to the IT Shop search field, your search returns published SharePoint sites only. 


My Access

The My Access page provides a central location for you to see all the resources to which you currently have access, as well as the type of access to those resources you have. Similar to the Find Resources page, the My Access page can be filtered to show resources by resource type.

The image below shows the My Access page with the Management Role filter applied.


The My Access page is comprised of a number of tabs as well as a Show Access link for each resource to which you you currently have access. The below table provides a description of each of the page elements.

My Access Page ElementDescription
My Access TabThe My Access tab provides a view of your current access to resources. The results shown in the view can be filtered by resource type to show only resources belonging to that type, as shown above.
My Expiring Access TabThe My Expiring Access tab provides a view of any current access to resources that is scheduled to expire.
Direct Reports Expiring Access TabThe Direct Reports Expiring Access tab provides any current access to resources belonging to your direct reports that is scheduled to expire.
Show Access LinkThe Show Access link provides a view of your current access to a particular resource, as well as provides options to request access to any non-delegated roles for that resource to which you may be entitled. For an example, see Requesting Access to Resources.

Resources I Manage

The Resources I Manage page provides a central location for you to see and manage all the resources for which you are a resource owner. In EmpowerID, resource owners are delegated with the ability to grant other users access to those resources. As with the Request Access and My Access pages, the Resources I Manage page can be filtered by resource type.

The below image shows the Resources I Manage page with the Management Role filter applied and search results against a specific role.

As shown in the image above, each resource item record contains an Who Has Access link. When clicked, this link opens a pane that allows the resource owner to see who currently has access to the resource and the type of access they have, as well as provides them with the ability to grant new access assignments against the resource.

Workflows

The Workflows page provides a central location for you to access any self-service workflow to which you are entitled, such as the Change Your Password and Edit Your Profile workflows.