Hello Sailpoint Community!
I’m trying to give someone the ability to request access for any user. We have a new application integration that’s currently in QA testing / user training. The application owner is creating the accounts, and sometimes has to create accounts for dozens of users. He’s been creating them manually in the target app. It’s much quicker to use Request Access and let IIQ provision it.
It looks like people are only able to request access for people they manage though. I know that giving him System Admin would work, in that he’d be able to request access for anyone. That seems a bit too broad though - he doesn’t need to be able to edit applications or tasks, for example.
Is there a more specific User Right I can assign him, that would give him the ability to request access for any user? Thanks!
Best,
Wendy
@WendyHolly
You might try testing by adding a custom Quicklink Population for that user(s) access rather than modifying the out of the box objects or trying to do that with a Capability/SPRight. See the attached screenshot (custom quicklink.png) of the Configuration tab creating a new Quicklink. You would put your user(s) in the list for Included Identities.
On this same configuration page, click on the Quicklinks tab, and select Request Access. Once that is done save your change and your new customization will be active for that user so that you can test to make sure they have the access they need.
This would give them access to the Manage Access->Manage User Access to request roles/entitlements for all users and they would be able to view these access requests once they are submitted under My Work->Access Requests.
Otherwise you might create a custom Capability with the need SPRights for this functionality. You’d want to review the following related documentation for this type of customization:
Good luck!
Check quicklink population Who can members request for?setting.
Thank you! I’ll try that.
