Access Request justification and duration

Question

I would like the request for access approval to include a justification and an optional duration field (in case not permanent) that can assist in the approval process and also be recorded for auditing purposes. Is this possible?

Comments

Hello Nicole,

Currently, there is no such possibility. We have the feature planned for future releases. You can upvote it in our roadmap: https://www.adaxes.com/info_roadmap.htm.

For us to help you with a workaround, specify the version of Adaxes you are currently using and the operations for which you need to implement the workflow. To check the Adaxes version:

1. Launch Adaxes Administration Console.
2. Right-click your service.
   
3. Click Properties in the context menu.
4. Adaxes version is displayed on the General tab.
   

---

The version is: 3.10.15918.0

Answer 1

Hello Nicole,

Thank you for clarifying. For example, to specify a reason for adding a user to a group, you can use a Custom Command with parameters. One parameter in the command will be used to specify a reason and the other to specify the group the user will be added to. To create the Custom Command:

1. Launch Adaxes Administration Console.
2. In the Console Tree, right-click your Aadaxes service.
3. In the context menu, navigate to New and click Custom Command.
   
4. On step 2 of the Create Custom Command wizard, select User Object type and click Next.
   
5. Click New.
6. Select Edit box and click Next.
   
7. Specify a parameter name (e.g. Reason).
8. Click Next and then click Finish.
9. Click New again.
10. Select AD object picker and click Next.
11. Specify a parameter name (e.g. Group) and click Next.
12. Click Configure.
    
13. In the Display only objects that match the following LDAP filter field, enter the following: (objectCategory=group)
    
14. Click OK and then click Finish.
15. Click Next.
16. Click Add an action.
17. Select Add the User to a group and click the Custom Action Description button.
    
18. In the dialog box that opens, specify a custom action description. For example: Add user %fullname% to group. Reason: %param-Reason%
    
    The description will be displayed in the Operation section of the Approval Request.
    The value references in the description will be replaced with the Full Name of the user added to a group and with the text specified in the Reason parameter for the Custom Command execution.
19. In Action Parameters, enter the following: %param-Group%
    The value reference will be replaced with the group that you select in the Group parameter for the Custom Command execution.
20. Select Get approval for this action.
    
21. Specify the approvers and click OK.
22. Click Next and finish creating the Custom Command.

You can execute the Custom Command in Adaxes Web Interface same as any other operation (e.g. Reset Password) or create an action for it. For information on how to configure actions for Adaxes Web Interfaces, see https://www.adaxes.com/tutorials_WebInt ... nsPane.htm.