Access Package End to End

This document contains information about creating an Access Package and all its stages up to the final approval stage.

What is an Access Package

Access Packages contain one or more resources where a user can quickly request access to one or more applications, roles or user groups after the authorized accounts approve this request.

📘 Instructions

There are some definitions required to create an Access Package;

1. A Policy Definition should be created to specify who can request the Access Package,

2. A Catalog Definition should be created, which specifies what will be in the Access Package content,

3. Finally, Workflow Definition can be created as an option for the Access Package detailed approval flow.

📋 Related articles

📘 Creating an Access Package

Necessary definitions were made to create an Access Package. Now Access Package can be created.

1. Navigate to the Governance → Access Package page

2. Define a Name and a Description

3. Select Policy selection to specify who can request the Access Package

4. Use the LifeTime option to set how long the user who has the Access Package can use it

   1. When an option other than Never Expire is selected, the user can select an Access Start Date and Access End Date within an allowable range when requesting the package

5. If you want to add other stages except for Resource Owner to the approval stages of the Access Package, you can choose a Workflow.

6. Switch to the Resource tab

7. Select a Catalog to determine what the user obtaining the Access Package will have access to.

   1. After the Catalog selection, you can include in the Access Package the entire catalog or the Resource you want one by one

8. If you want to ask a question that will get extra information from the user who requested the Access Package, you can switch to the Questions tab and add a question.

📘 Request for an Access Package

1. Navigate to the Requests Page in the Account (SSO) app.

2. Click the Request button and select the Access Package you want to request in the modal that appears.

   1. An icon will appear if the Access Package has a Workflow.

      1. 

   2. If there is a Lifetime period for the package, you must specify the time intervals you want to have the Access Package.

      1. 

3. After answering the questions asked for the Access Package, your request will go to the Pending state.

4. You can view the status of the request in the Requests table. In addition, if the Access Package is associated with a Workflow, you can view all the steps of the request in the Steps section.

   1. 

📘 Review a Package Request as Approver

1. Navigate to the Approvals Page in the Account (SSO) App.

   1. To review Access Package requests associated with Workflow, go to the Approvals page, not associated with Workflow, go to the Review page.

2. Four decision options will appear in an Access Package review phase related to Workflow.

   • Approve: The current Workflow Step will be completed, and if other Reviewers approve it, the next Workflow step will be started. If it is the last step, the package will be assigned to the user.

   • Reject: Package request will be terminated, and the package will not be assigned to the user even if other Reviewers have approved it.

   • Return: It will return to the previous Workflow Step for reconsideration.

   • Escalate: The decision authority for this step will be given to select another user.

   • 

3. After the Workflow steps are completed, the user accesses to the resources in the Catalog.

   1. If the Access Package is not associated with a Workflow after the Catalog Owners approve the requests, the User accesses the Resources in the Catalog.