Setting up an IT Shop Solution
One Identity Manager Users in the IT Shop
Putting the IT Shop into Operation
Requestable Products
Preparing Products for Requesting
Approval Processes for IT Shop Requests
Entering Service Items
Assigning and Removing Products
Preparing the IT Shop for Multi-factor Authentication
General Master Data for a Service Item
Pricing Information
Extended Master Data for a Service Item
Default Service Items
Additional Tasks for Managing Service Items
Entering Service Categories
Service Item Overview
Editing Product Dependencies for Requests
Assign Hierarchical Roles
Assign Function Areas
assign extended properties
Displaying Websites
Changing Products
Assign Tag
Assign Object Dependent References
Specifying Products Dependencies
Reports about Service Items
Service Category Master Data
Default Service Categories
Additional Tasks for Managing Service Categories
Entering Product Specific Request Properties
Products with a Limited Request Period
Product Request on Customer or Product Relocation
Non-Requestable Products
Entering Terms of Use
Entering Tags
Editing Table Properties
Preparing Starling 2FA Token Requests
Using Multi-Factoring for Requests
Requesting a Security Code
Assignment Requests and Delegating
Standard Products for Assignment Requests and Delegation
Requesting Single Business Roles
Customizing Assignment Requests
Preparing for Delegation
Notifying Delegates
Canceling Assignments and Delegations
Removing a Customer from a Shop
Setting up Assignment Resources
Creating IT Shop Requests from Existing User Accounts, Assignments and Role Memberships
Creating Requests for Employees
Creating User Account Requests
Creating Requests for Workdesks
Creating Assignment Requests
Adding Groups Automatically to the IT Shop
Editing Approval Policies
Request Sequence
General Master Data for Approval Policies
Default Approval Policies
Additional Tasks for Approval Policies
Approval Workflows
Working with the Workflow Editor
Setting Up Approval Workflows
Additional Tasks for Approval Workflows
Deleting Approval Workflows
Default Approval Workflows
Determining Effective Approval Policies
Selecting Responsible Approvers
Default Approval Procedures
Request Risk Analysis
Testing Requests for Rule Compliance
Approving Requests from an Approver
Automatic Request Approval
Obtaining Other Information about Requests by an Approver
Appointing Other Approvers
Setting up an Approval Step
Approvers cannot be Established
Automatic Approval on Timeout
Abort Request on Timeout
Approval through Chief Approval Team
Approving Requests with Terms of Use
Using Default Approval Processes
Self-Service
Using IT Shop Structures to Find Approvers
Using the Request Recipient to find Approvers
Using a Specific Role to find Approvers
Using the Requested Product to Find Approvers
Using an Approval Role to Find Approvers
Using a Cost Center to Find Approvers
Using a Department to Find Approvers
Using a Requested Role to find Approvers
Deferred Request Approval
Calculated approval
Making External Approvals
Finding Requesters
Setting up Approval Procedures
Deleting Approval Procedures
Determining Approvers
Requests Overview
Multiple Requests for one Product
Requests with Limited Validity Period
Relocating a Customer or Product to another Shop
Requests for Employees
Request Change of Manager for an Employee
Canceling a Request
Notifications in the Request Process
Managing an IT Shop
Demands for Approval
Remind Approver
Scheduled Approval Demands
Limited Period Request Sequence
Request Granting or Denying Approval
Request Abort
Escalating a Request
Self-Service
Approval Rejection
Notifications with Questions
Request Approval through Additional Approvers
Unsubscribing an Approved Request
Product Change Notification
Default Mail Templates
Bulk Delegation Notifications
Approval by Mail
Requests with Limited Validity Period for Challenged Role Memberships
Requests from Permanently Disabled Employees
Deleting Requests
IT Shop Base Data
Default Solution for Requesting System Entitlements
Role Types
Processing status
Role Classes
Attestors
Product owners
Chief approval team
Business Partners
Functional areas
Standard Reasons
Setting up IT Shop Structures
General Master Data for a IT Shop Structure
User Defined Data for a IT Shop Structure
Additional Tasks for IT Shop Structures
Setting Up a Customer Node
General Master Data for a Customer Node
General Master Data for a Customer Node
Additional Tasks for Customer Nodes
Deleting IT Shop Structures
Templates for Automatically Filling the IT Shop
Implementing Shelf Templates in a IT Shop Solution
Editing Shelf Templates
Creating Custom Mail Templates for Notifications
General Master Data for a Shelf Template
User Defined Master Data for a Shelf Template
Additional Tasks for Shelf Templates
Assigning Shelf Templates to Shops and Shopping Center Templates
Deleting Shelf Templates
General Properties of a Mail Template
Creating and Editing an Email Definition
Custom Notification Processes
request templates
Adding an SharePoint Group
Adding an Active Directory Group
Modifying an Active Directory Group
Deleting an Active Directory Group
Requesting Groups Memberships
Error Handling
Appendix: Configuration Parameters for the IT Shop
Appendix: Request Statuses
Appendix: Example of Request Results
Request Granting or Denying Approval
Request Granting or Denying Approval
When a request is granted approval or denied, the request recipient is notified by email. Notification may occur after approval or denial of a single approval step or once the entire approval process is complete. Requests can be automatically granted or denied approval once a specified time period has expired. The recipient is notified in the same way in this case.
To set up the notification procedure
- Enter the following data in the approval step when notification should immediately follow the approval decision of a single approval step:
Table 85: Approval Step Properties for Notification Property Meaning Mail template approval Select the mail template "IT Shop request - approval granted to approval step". Mail template denied Select the mail template "IT Shop request - approval not granted to approval step".
- Enter the following data in the approval policy when notification should immediately follow the approval decision of the entire approval process:
Table 86: Approval Policy Properties for Notification Property Meaning Mail template approval Select the mail template "IT Shop request - granted approval". Mail template denied Select the mail template "IT Shop request - denied approval".
Request Abort
Request Abort
Requests can be automatically aborted for various reasons, for example, when a specified time period has expired or if no approver can be found. The request recipient is notified.
To set up the notification procedure
- Enter the following data for the approval policy:
Table 87: Approval Policy Properties for Notification Property Meaning Mail template aborted Select the mail template "IT Shop request - Abort".
Escalating a Request
Escalating a Request
Requests can be escalated if a specified time period has expired. If a request is escalated, the requester can be notified by email.
To set up the notification procedure
- Enter the following data for the approval policy:
Table 88: Properties of an Approval Step for Notifying Escalation Property Meaning Mail template Escalation Select the mail template "IT Shop request - escalation".
Self-Service
Self-Service
If, in an approval step, other
To set up the notification procedure
- Enter the following data for the approval step.
Table 89: Approval Step Properties for Notification on Delegation Property Meaning Mail template for delegation Select the mail template "
TIP: To allow approval by email, select the mail template "
