Process
...
Overview - Request Privileged Access (Requester POV)
Table of Contents minLevel 2 absoluteUrl true
📝Note: Use of PAM from requester Point of View
- PAM access provides elevated permissions and must be requested only for valid business or emergency needs.
- Clearly document the reason, scope of work, and expected activities when raising the request.
...
- Requests with insufficient or incomplete information will be rejected.
- All user activities are logged and monitored, and users are
...
- responsible for their actions.
...
- During the hypercare period, access will automatically expire within one week according to the default duration, until the Release 4 solution is implemented for Release 2.
- If reviewer challenges, users must explain why access was used, confirm approvals for any direct production changes, and provide accurate details including before and after values where applicable
Overview of Process to raise PAM requestTable of Contents absoluteUrl true
Step 1: Login to IAG to raise the access
...
Step 2: Navigate to Access Request
Step 3: Select Role and Create Request
Step 4: Fill Request Details
Step 5: Submit Request
Step 6: Receive email notification for submission and approval of request
Step 7: Login and Use of Privileged Access in Target Applications
...
request
- https://syw-iag-devprd-eu10.sapciag-ee.cfapps.eu10.hana.ondemand.com/cp.portal/site#Shell-home
- Based upon the access application would be visible here
Step 2: Navigate to Access Request
- Go to the Access request tab and click on the ‘Create Access Request’ application
...
- In Search Access or Application
, search the role by prefix string PAM_ and all PAM related Business roles will be visible here.
Step 3: Select Role and Create Request
Choose from the available PAM roles as below with justification explained in the description section after PAM role selection
...
- Select the appropriate PAM role and click on the Create request.
Step 4: Fill Request Details
- Below page will be displayed after clicking on the Create Request button.
...
- Reason for Request: PAM for SAAS Application
- Priority: Select High, Medium, Low as per the urgency basis
- Description: Why emergency access request is raised and what will be done in the system.(mandatory for approval)
- Duration of access requirement in the description section(Mandatory for approval)
- Manager and Email address will be populated automatically.
Step 5: Submit Request
- Click on the Submit Request
...
- Click on OK, to check request status
- check Check request status for access request information.
Step 6: Receive email notification for submission
- The user receives an email notification confirming that the access request has been submitted successfully.
Step 7: Receive email confirmation for approval status
- The user receives an email confirmation on the approval or rejection status of the access request.
Step 8: Login and Use of Privileged Access in Target Applications
- Once the access request is approved and provisioned, the user may log in to the respective application, such as SAP Ariba or Icertis, and perform activities using the granted privileged access.