This article outlines on how to handle a request for IS users with missing access (transaction or object level) for Non-Production Systems.
Document to refer
This is the document given by Solvay and should be referred to get any details related to the IS User management. Also has all the details related to what roles are to be given and who are the approvers.
IMP Note : Refer to this document all the time.
Identifying the Tickets :
There is no specific template for this. The tickets are generally like the regular end user tickets where they may ask for additional access. As the users are already existing users, you can find them in IDM and sort them as IS User as per the roles or department.
Imp Note
In non-prod systems, IS users can have access to other roles only for a temporary period and only after approval.
Note: Additional historical roles are currently present in non-production systems for some IS users, that have to be cleaned and especially not assigned in case of a new IS user created in copy of a reference one.
Approvals :
In case of any new transaction access or missing authorizations access, we will have to take approvals from the manager of the user post analysis.
Providing the Access :
- We can provide any access to IS Users in Non-production systems through the regular back-end privilege assignment process in IDM.
- There are no restrictions but before assigning the roles please make sure to get the approvals and also check the period for which those roles can be assigned for.
Once added the roles in IDM, inform the manager and the user in the ticket and the issue is resolved.
