Decide on Self-service requests assigned to you. Segura™ emails you when a request needs your decision. You can approve or reject it until it expires.
Requirements
You must be an approver of the request:
- Role request: a global approver with the Self-service Approver role.
- Access policy request for PAM Core in the static access policy model, and Access policy administration request: an administrator of the access policy.
- Any other Access policy request: a global approver.
- Handover of access policy administration: the user chosen to receive the administration rights.
Steps
- In Segura™, go to Desktop.
- In the side menu, select Access Self-service > My approvals.
- Find the request. The Expiration column shows when the request expires.
- Open Actions and select Details.
- Review the requester, the requested items, and the Justification.
- On the details page, choose one of the following:
- Approve: Segura grants the requested access and notifies the requester.
- Reject: Segura closes the request without granting access.
If Approve and Reject do not appear, you are not an approver of that request or the request is no longer pending.
You can also decide without opening the details. Use the row actions on My approvals, or the Actions menu of the My approvals block on the Self-service panel.
The first decision settles the request. If another approver decides first, your response shows as No response in the request details.
What happens after your decision
- Role request: the requester receives the requested roles.
- Access policy request: the requester becomes a member of the access policy. Segura does not grant the access if the access policy is no longer offered when you approve. For example, an administrator may have disabled it or removed it from the access policies users can request. The request then ends with the Error status.
- Access policy administration request: the requester becomes an administrator of the access policy.
- Handover of access policy administration: you replace the requester as an administrator of the access policy.
A request with no decision expires at the end of the expiration time set by the administrator. Expired requests cannot be approved, and the requester must open a new one.