Approval Workflow
Request authorizations directly from the team leader
Integrate reliable process management into user administration with IAM Automation:
regulate sensitive access, set times and protect group memberships.
The user perspective
Access rights are best assigned by the decision-makers, without passing through IT.
Green light from direct supervisors means a fast start for the team member.
With IAM Automation in IDM-Portal, approval processes are automated and made much easier.
Three main criteria
Automate complex identity and access management tasks with FirstWare IDM-Portal.
The tasks
can be processed conveniently and in the background, even by non-IT employees.
The focus
is on user orientation through fast and failure-resistant automated processes.
The source and target systems
can be diverse and are connected as needed by means of suitable connectors.
How an approval workflow works in IDM-Portal
Employee
requests access to IT resources
via FirstWare IDM-Portal.
IAM Automation in IDM-Portal
implements the authorization properly:
Workflow management for all employees
Main features – Approval Workflow
Application for group memberships
Configure which group is subject to approval in IDM-Portal. A blue mark indicates the sensitive group.
Protect memberships in sensitive groups through an approval process.
A department requests group memberships for employees:
- approvers are automatically informed.
- make decision: “approved” or “rejected”
- membership “approved”: the user is added to the group in AD
If you want synchronization with Azure AD, the user can also be added to the AAD group.
Approval of attribute changes
Determine which data changes need to be reviewed. A blue mark indicates which attribute fields require approval.
This option is helpful in a self service order system:
- employees are allowed to update their own data
- however, the change must be approved
Multi-level approval process
When several approvers are involved in the process, it is called a multi-level workflow.
The process flow is specified step by step in IDM-Portal:
- the user enters data changes
- manager 1 checks and confirms
- manager 2 controls and approves
- manager 3 releases data record
All user interactions run automatically.
Key users are involved and fully informed.
Set time periods, plan time of absence
Manage group memberships or attributes automatically and time-controlled.
For making the data changes select:
- the effective date at a certain time
- a certain period of time (from… to…)
Plan employee attendance and absences in advance, from parental leave to temporary assignments.
The advantages
Involvement of decision makers
Protection when granting access
Time-controlled processes
Tip from the expert
As a team leader, you often have a busy schedule and
can’t always review approval requests in a timely manner.
Delegate the approval of requests to colleagues – either permanently, once,
or for a specific time period. This can be a one-step or multi-step approval workflow.