Request Selectors
A Request Selector is a configuration that assigns an approval process to a user attempting to access an action. Prior to their ability to access this action, they must first submit a request that requires approval, after which, their access to this action will be granted for a limited time.
Request Selectors can be configured on specific Space actions or to individual Assets, or multiple via inheritance.
Creating Space Level Request Selectors
Space level Request Selectors enable an approval process to be assigned to specific actions configured on Spaces.
To enable Space-level Request Selectors:
- Log in with an Administrator or Request Manager account.
- Navigate to Management > Request Selectors and click the Add button.
-
Click on the parameter name for details about each or follow the guidance provided here:
- Request Form: This is the Request Form for this selector that will define its approval process. Please note that only enabled request forms will be available for selection.
- Operations: List of operations that could be assigned for a request selector. The following operations are available:
- Space Manage Permissions: An operation to manage space permissions.
- Space Manage Policy: An operation to manage segmentation policies.
- Targets: List of users or groups that are required to submit an approval request based on the request selection requirements.
- Time: Defines the time when the request selector is applicable. The following options are available; Work hours, After hours, Weekend, Holiday.
- Exclusive: Exclusive is an indicator that the access request to the operation is granted for exclusive use after request approval. Exclusive use means that only the approved user will have access to the approved operation or action until the request is completed.
- Unavailable: The use of the Exclusive option is not available for selection and will be disabled.
- Optional: The use of the Exclusive option is configurable by the requester during the submission process. They may request exclusive access or not on their submitted request form.
- Required: The use of the Exclusive option is not available for selection and will be forced to exclusive.
-
Click the Save button to complete this configuration.
Creating Asset Level Request Selectors
Asset level Request Selectors enable an approval process to be assigned to specific actions configured on an Asset or multiple Assets using inheritance.
To enable Space-level Request Selectors:
- Log in with an Administrator or Request Manager plus Asset Role: Asset Manager or higher account on the asset where a selector is to be configured.
- Navigate to the asset (Container or Asset), select Manage > Request Selectors and click the Add button.
-
Click on the parameter name for details about each or follow the guidance provided here:
- Request Form: This is the Request Form for this selector that will define its approval process. Please note that only enabled request forms will be available for selection.
- Operations: List of operations that could be assigned for a request selector. The following operations are available:
- Space Manage Permissions: An operation to manage space permissions.
- Space Manage Policy: An operation to manage segmentation policies.
- Targets: List of users or groups that are required to submit an approval request based on the request selection requirements.
- Time: Defines the time when the request selector is applicable. The following options are available; Work hours, After hours, Weekend, Holiday.
- Exclusive: Exclusive is an indicator that the access request to the operation is granted for exclusive use after request approval. Exclusive use means that only the approved user will have access to the approved operation or action until the request is completed.
- Unavailable: The use of the Exclusive option is not available for selection and will be disabled.
- Optional: The use of the Exclusive option is configurable by the requester during the submission process. They may request exclusive access or not on their submitted request form.
- Required: The use of the Exclusive option is not available for selection and will be forced to exclusive.
-
Click the Save button to complete this configuration.