Cymmetri offers the capability to define on-demand roles, allowing administrators to enable access dynamically based on the following criteria with different combinations such as-.
Function Group
Function
Department
Job
Users can request on-demand roles, and the approval matrix should be defined for a specific role, the approval process will be initiated upon user request.
Additionally, any changes to attributes within Cymmetri should automatically adjust access if the user already has access to the application and associated roles.
Cymmetri provides the option to activate on-demand access. In cases where the administrator does not enable this feature, it will operate according to default Request for Access feature.
Condition-based-
The administrator can choose either the application itself or the application with associated roles. Depending on the conditions, the user self-service page will display either the application or the application with roles.
The activation or deactivation of exception approval can be done within Cymmetri once the administrator enables this feature. The system facilitates the specification of exception-based requests through the self-service portal.
Administrators will set conditions in the backend concerning:
Function Group
Function
Department
Job
The admin will map the applications along with roles.
Users will then choose the above criteria, and based on their function, they can select applications and associated roles.
When a user requests an exception for an application, only their associated functional group will initially appear, and they cannot switch to another functional group.
For instance, if the user's functional group is "Weighbridge," the function, department, and job will be associated accordingly.
Approval for exceptions will be initiated as required.
For On-Demand Access
User to select “On Demand” Request
The user will be able to see the list of applications that he is eligible to request as per the logic defined
The user will select the application that he wants access to and a pop-up will appear to select the role
The user may select Lifetime/Time-Based access and then select the role from the drop-down.
The drop-down will contain a list of on-demand roles as per the logic.
Lifetime access:
Time based access:
The user shall save the request. And the approval workflow will be triggered as defined
For Exceptional Access Request
User to select “Exceptional Access” from the drop-down
The user will see the filters of HR attributes and based on the filters selected will get the list of applications
The user will select the application that he wants access to and a pop-up will appear to select the role. The drop-down will contain a list of on-demand roles as per the logic.
Lifetime access:
Time-based access:
The user shall save the request. And the approval workflow will be triggered as defined.
