Inbox

The Cymmetri application workflow mechanism is used to enforce approval of users access requests for the purpose of right-user-getting-correct-access. At the same time, providing a history of all such requests and their approvals ensures accurate reporting.

The Cymmetri Inbox section allows users to view and approve the access requests for other Cymmetri users. Apart from user access approval requests, the user can also view the status of their own access requests under My Requests section. Lets have a detailed understanding of each section:

Requests

The Requests section under Inbox lists the application access requests raised by other Cymmetri users.

Requesting an Application

Cymmetri users can request for access to applications not automatically assigned to them. These request for application access may not always require an approval. In certain cases the access request will be automatically applied as there is no approval workflow configured by Cymmetri Administrator. But in cases where an approval is needed a workflow request is triggered, this request process is managed from My Access > Request section.

Please note: The User will be allowed to select the roles based on configuration at application settings page. If user is allowed to request for more than one role, in such scenario all roles will be combined in the approval request for the approving authority to approve or deny. Similarly, based on configuration, user will be able to search and select only the roles allowed explicitly for request. Example: business users shall not be allowed to request for Administrative type roles when raising the requst.

Approving an Application Request

After a Cymmetri user has raised an approval request, the approver authority is selected by Cymmetri automatically. The approver is alerted by the system through an notification event in the user’s Notification tray. Cymmetri can also alert the approval user by way of email sent to the user. By clicking on the notification or the Application Requests short-link, the user is sent to the Inbox page.

The user can also view the notification request under Request section on the user’s Dashboard.

Here the user should click on Open menu under Requests section to view all the pending application access requests. On clicking one of the mail list items, the user can view the details of the application access request as shown above

The approval user can now approve the request or mark their rejection for the access request. The approval user may provide comments for the action taken under the Comment box text area.

After clicking the Accept button, the user approves the application access request. Cymmetri shows the success message to the approval user.

Workflow Escalations and automatic request closure

Cymmetri allows flexible workflow configuration for managing closure of access requests in time bound manner. In case of escalation scenario, the next in line reporting manager will be automatically escalated based on turn around time definition for the particular workflow step. The relevant users will be alerted through email notification of the escalation of such requests.

If no escalation is defined, Cymmetri will automatically mark the request as rejected to end the request cycle. Cymmetri will alert the user of the automatic rejection via email notification.

Viewing Application Request History

Cymmetri users can view the history of processed requests by way the Archive menu under Requests section. The user can click on any one of the mail list items, and view the details of task.

If an access request requires more than one level of approval, the same can be viewed one below the other with the following details -

• Approver Name

• Date and Time of approval

• Approver comments (if any)

Requesting Change in Application Access

Cymmetri users can request for change in access role for applications assigned to them. The request process is managed from My Access > Application > Setting context menu. An approval request is generated once the user submits the role change request.

The role change may not always require an approval. In certain cases the role change will be automatically applied as there is no approval workflow configured by Cymmetri Administrator.

Claims

Claims is the process of approving user access requests through any one approving authority in Cymmetri. In the event one approver is unavailable, it is likely other approver(s) can stake claim for the request and process the access request.

The approvers are configured by the Cymmetri Administrator. The approver level level can be defined as a single user, reporting manager or a group of users.

A claim request can be access from the Dashboard or the Notification tray.

A click on the notification or claims short-link will land the user on the Claims section of the Inbox.

The user can click on any one of the mail list items under Claims section, and view the details of task.

Once the user clicks on Claim button, the request moves from the Claims section to the Requests section. The claim user sees the success message "Task claimed successfully" and the user is automatically guided to the Open menu.

The user can click on the list item and view the details for access request. The approver can leave comments if needed and Accept to approve or Reject the request.

Once approved successfully, the user will see the success notification.

My Requests

The My Requests section lists all the application access requests raised by the logged in user. Here the user can view the status of the application access requests raised and review the access grant history.

Open

The Open menu lists all the requests yet to be approved for the user.

Closed

The Closed menu lists all the requests that have been either approved or rejected for access. By clicking on one of the mail list items, the user can view the history of the task. The details of the approve or reject action can be seen with the time and date of such an action as well as the comments of the approver if any.