On Demand Access

Cymmetri offers the capability to define on-demand roles, allowing administrators to enable access dynamically based on the following criteria with different combinations such as-.

• Function Group

• Function

• Department

• Job

Users can request on-demand roles, and the approval matrix should be defined for a specific role, the approval process will be initiated upon user request.

Additionally, any changes to attributes within Cymmetri should automatically adjust access if the user already has access to the application and associated roles.

Cymmetri - Self Service Designer

Cymmetri provides the option to activate on-demand access. In cases where the administrator does not enable this feature, it will operate according to default Request for Access feature.

Enable On-Demand Access

Condition-based-

Request On-Demand Access

The administrator can choose either the application itself or the application with associated roles. Depending on the conditions, the user self-service page will display either the application or the application with roles.

Exceptional Request

The activation or deactivation of exception approval can be done within Cymmetri once the administrator enables this feature. The system facilitates the specification of exception-based requests through the self-service portal.

Administrators will set conditions in the backend concerning:

• Function Group

• Function

• Department

• Job

The admin will map the applications along with roles.

Users will then choose the above criteria, and based on their function, they can select applications and associated roles.

When a user requests an exception for an application, only their associated functional group will initially appear, and they cannot switch to another functional group.

For instance, if the user's functional group is "Weighbridge," the function, department, and job will be associated accordingly.

Approval for exceptions will be initiated as required.

User request process

For On-Demand Access

1. User to select “On Demand” Request

   
2. The user will be able to see the list of applications that he is eligible to request as per the logic defined

   
3. The user will select the application that he wants access to and a pop-up will appear to select the role

   
4. The user may select Lifetime/Time-Based access and then select the role from the drop-down.

   The drop-down will contain a list of on-demand roles as per the logic.

   Lifetime access:

   

   Time based access:

   
5. The user shall save the request. And the approval workflow will be triggered as defined

For Exceptional Access Request

1. User to select “Exceptional Access” from the drop-down

   
2. The user will see the filters of HR attributes and based on the filters selected will get the list of applications

   
3. The user will select the application that he wants access to and a pop-up will appear to select the role. The drop-down will contain a list of on-demand roles as per the logic.

   Lifetime access:

   

   Time-based access:

   
4. The user shall save the request. And the approval workflow will be triggered as defined.