IBM Security Identity Governance and Intelligence, Version 5.2.1

Introduction to Access Requests

Access Requests (AR) is the module dedicated to running authorization processes.

In the Process Designer (PD) module, the IBM® Security Identity Governance and Intelligence administrator defines workflows that implement customized sequences of activities that build authorization flows.

These authorization flows are then managed with Access Requests to assign operating permissions, such as business roles/IT roles/permissions/rights) to the users registered on the system.

Figure 1. Example of authorization workflow
Example of authorization workflow

Access Requests directly communicates with Access Governance Core to execute the assignment/revocation of roles and the propagation of permissions on the target systems.

Access Requests provides the following functions:
  • Create user entities
  • Manage user accounts (Suspend/Restore account and reset password)
  • Assign permissions to users
  • Manage the assignment of administration roles
  • Manage role delegation