This document provides information about the Self-service screens, which display the requests you opened and the requests waiting for your decision. You can open, track, cancel, approve, and reject requests on these screens. More information in Self-service requests.
Path to access
- In Segura™, go to Desktop.
- In the side menu, select Access Self-service, then select Panel, My requests, My approvals, or All requests.
You can also open the panel from the user menu, by selecting Access Self-service.
Panel
The panel is the starting point for every request.
| Item | Type | Description |
|---|---|---|
| Request cards | Cards | One card per request type enabled in the Self-service settings. Select a card to open a new request. The cards are Role request, Access policy administration request, Handover of access policy administration, Credential request, and AD Account Provisioning. Access policy requests have one card per product, such as PAM Core access policy request. |
| My requests | Table | Your last 5 requests. The Actions menu of each row includes Restart execution for a failed AD Account Provisioning request. Click View to open the full list. |
| My approvals | Table | Your last 5 requests waiting for your decision. The Actions menu of each row includes Approve and Reject. Click View to open the full list. |
My requests
Lists the requests you opened.
| Column | Description |
|---|---|
| ID | The request code. |
| Operation | The request type. Access policy requests show as Access policy request for every product. |
| Requester | The user who opened the request. |
| Requested on | The date and time of the request. |
| Status | The current status of the request. |
| Actions | Details opens the request details. Cancel cancels a pending request. |
My approvals
Lists the requests waiting for your decision. It shows the same columns as My requests, plus:
| Column | Description |
|---|---|
| Expiration | When the request expires if no one decides it. |
| Actions | Details opens the request details. Approve and Reject record your decision. They appear only for requests you can decide. |
All requests
The audit report for Self-service. It lists every Self-service request, from all users, and only Self-service requests. Users with the System Administrator, PAM Administrator, or PAM Auditor role can open it.
It shows the same columns as My requests, plus:
| Column | Description |
|---|---|
| Approver | The user who decided the request. |
| Date | The date and time of the decision. |
Use the filter to narrow the list, for example by status.
Request details
Opens from Actions > Details on any request list. If you can decide the request, the page also shows Approve and Reject. For an AD Account Provisioning request, the details show the execution code, which administrators use to find the operation in the operations report.
| Section | Description |
|---|---|
| Request | The request code, requester, request date, status, and, for role requests, the number of roles and approvers. |
| Roles or Access policies | The requested items. For AD Account Provisioning, the username and the identification. |
| Justification | The reason the requester wrote. |
| Approvers | Each approver with their status, the request date, and the response date. See Approver statuses. |
Request statuses
The panel, My requests, My approvals, and All requests use the same statuses.
| Status | Description |
|---|---|
| Pending | The request is waiting for a decision, or an AD Account Provisioning request is running. |
| Executed | The request was approved and Segura granted the access, or Segura created the credential or account. |
| Rejected | An approver rejected the request. |
| Expired | The expiration time ended before anyone decided the request. |
| Cancelled | The requester cancelled the request while it was pending. |
| Error | Segura could not complete the request. This happens in two cases: an AD Account Provisioning execution fails, or the requested access policy is no longer offered at approval time. For example, an administrator may have disabled the access policy or removed it from the access policies users can request. |
AD Account Provisioning requests end only as Executed or Error. They do not expire and cannot be cancelled. Role request requests never end as Error.
Approver statuses
The Approvers section of the request details shows each approver's response.
| Status | Description |
|---|---|
| Pending | The approver has not responded yet. |
| Approved | The approver approved the request. |
| Rejected | The approver rejected the request. |
| No response | The request closed before this approver responded. |