Requesting Access to an Application

Any user who has an account in the Privileged Access Service can request access to applications that the administrator has configured with a “request and approval” work flow. No special privileges are required to make requests or approve requests.

To request access to an application

1. Log on to the Admin Portal.

2. Click Apps > Add Web Apps.

3. Type a search string to find the application of interest in the catalog, then right-click or select the check box next to the application.

4. Select Request Launch from the Actions menu.

   Only applications with workflow enabled display a Request Launch option.

5. Select either Permanent or Windowed in the Assignment Type drop-down menu.

   • Permanent - if the request is granted, the user will have access to the app for an indefinite time period, or until it is revoked by an administrator.

   • Windowed - if the request is granted, the user will have access to the app for the specified window, or until it is revoked by an administrator.

     

6. (Optional) Select the start and end date and time if the request is for a windowed assignment type.

   

7. Type the business reason for requesting access to the application, then click Submit to continue.

8. Click Close to close the App Catalog.

   An email notification of your request is sent directly to the designated approver. You can click the Requests tab to see the status of your request. You will also receive an email notification when you request is approved or rejected. If your request was approved, the email will include a link to open the Admin Portal.

Viewing Request Status and History

You will only see the Requests tab if you have made a request or approved a request. After you have made or responded to at least one request, you can click the Requests tab to view the status of requests and the history of request activity.

The list of requests includes the following information:

• Description provides a brief summary of the request indicating the type of access or application requested.

• Status displays the current status of the request as Pending, Approved, Rejected, or Failed.

  You can review the request details to see the reason the request failed. For example, a request might fail if the email address for the approver or requester is invalid. A failed request might also indicate that the time allowed for taking the requested action has expired. For example, assume the request was for permission to use the root account to log on to a resource and the request was approved with a duration of 60 minutes. If the requester did not log on within 60 minutes of the request approval, the request status will display Failed.

• Posted displays the date and time of the most recent activity for each request.

• Approver displays the user or role designated for approving access requests if the approval is pending or the specific user who approved or rejected the request if the request has been resolved.

• Requester displays the user who submitted the request.

• Latest Log Entry displays the most recent information recorded for the request.

Viewing Request Details

You will only see the Requests tab if you have made a request or approved a request. After you have made or responded to at least one request, you can click the Requests tab to view the status of requests and the history of request activity.

If you are an approver, you can also go directly to Request Details by clicking the link in the email notifying you of the request.

Regardless of the entry point for viewing request details, the request information table displays details appropriate for the current state of the request. For example, you might see the following information:

• Posted displays the date and time of the most recent activity for each request.

• Description provides a brief summary of the request indicating the type of access or application requested.

• Requester displays the user who submitted the request.

• Requesters Reason displays the business reason provided by the user who submitted the request.

• Approver displays the user or role designated for approving access requests if the approval is pending or the specific user who approved or rejected the request if the request has been resolved.

• Status displays the current status of the request as Pending, Approved, Rejected, or Failed.

  Depending on the status of the request, you might see the reason the request was rejected or the reason why the request failed.