Approve or reject access requests

Users who have the Approver role can see and approve or reject access requests.

These requests are created when:

• A delegated administrator assigns a role to a user if approval is active for the role.
• A user submits a request through self-service registration. See Set up self-service registration for details. After a user submits an access request, an email is sent to the approver(s) detailing a request is pending for their action to be taken.

To customize columns on the Approval Details page:

The information that is displayed on this page by default appears to be the identical for all requests, making it difficult to tell requests apart. We recommend that you customize the columns on the Approval Details page to include additional user identification and other information you need so you can decide if you want to approve or reject a request.

You can create your own custom view for the Approval Details page by specifying the columns you want to see in it.

1. Under the Requests menu on the left, click Pending Approvals.
2. On the Approval Details page, click the Add View icon on the toolbar.
3. On the Definition tab, edit the Name field to give your view a name.
4. Select the task types that appear in your view:
   1. To the right of Task Type, click the search icon .
   2. Holding down the Ctrl key, select RoleLevelApprovalFlow and RoleLevelApprovalFlowNoMail.
   3. Click OK.
5. Select the columns that appear in your view:
   1. Select the Display tab.
   2. Move columns from the Available list to the Selected list to add them to your view.

      Suggested columns:

      • Title: Contains the link to the Request Details page.
      • Requester: Displays the requesting user's full name, including the ShortOrgId.
      • RequesterDisplayName: Shows the requesting user's display name.
      • RequestID: OHSIAMS unique identifier for the access request.
      • Acquired By: Shows the display name of the Approver who claimed the request, useful if there are multiple users with the Approver role in your organization.
   3. Click OK.

Your new view is available from the Views menu, under My Views. This view is only visible to you, other users can't see it.

To approve or reject a pending request:

Approving a request grants the requested role to the target user.

1. Under the Requests menu on the left, click Pending Approvals.
2. If you have a custom view, select it under My Views on the left.
3. If multiple users in your organization have the Approver role, you must claim a pending request before you can approve or reject it. Otherwise skip this step.
   1. Highlight the row of the request.
   2. From the Actions list at the top of the page, select Claim.
4. Double-click the row of the request.
5. Add a comment (optional to approve, but required to reject):
   1. Select the Approval tab.
   2. In the upper right of the Comments text box, click Create.
   3. Type your comment and click OK.
6. In the top right of the page, click Approve or Reject.