Requesting access using the Web interface

To request access to a network resource:

Log into the main menu.
Click Request access to network resources in the:
- My profile section to request access for yourself.
- Other users section to request access for another user.
  Bravura Identity displays the Select a user search page. Select the user that you want to request access for.
Bravura Identity displays a table that allows you to browse network resources. Available resource types are listed in the Select: Resource Type (left) column:
Select the appropriate resource type.
Bravura Identity displays individual resources in the Browse: <Selected Type> (right) column:
Alternatively, you can search for the resource.

Select the resource you want to browse.

If you or the selected user has multiple accounts on the target system managing the resource, you are prompted to select which account you are requesting access permissions for.

Resource type	Bravura Identity displays …
Share/folder	A tree-view of the folder including any sub-folders.
Mail distribution list	A tree-view of the directory.
Printer	A list of printer names written in the format: <server name>-<printer name>.
Sites	A tree-view of SharePoint site including any sub-sites.
Documents	A tree-view of SharePoint documents including any sub-documents.

Click the or icon to expand or collapse folders or directory containers. Depending on how Bravura Identity is configured, you may not be able to browse subfolders of a resource unless you are already a member of a group with read access.
Click the privileges icon next to the resource you want to view.
Bravura Identity displays a request form in the Select desired privileges for: <Resource name> (right) column:
If applicable, this column contains:
- A list of groups with privileges on the resource
- A Request access checkbox for each group that you can request access to.
  You cannot request access for yourself if you are already an owner or a member of the group. You cannot request access for somebody else if he or she is already an owner or a member of the group.
- The read / write Privileges assigned to each group
- The Owners for each group
- A Child groups icon for groups that have member groups
  If you want to view or request access to a member group, click C hild groups next to the parent group (if applicable).
- A display owners icon and a members icon for groups where you are a group owner
  These icons are not available when requesting resources for another user. See Managing Access to Network Resources for more information about performing operations as a group owner.
Select the checkboxes for the groups that you want to request access to.
Click Complete.
From this point, Bravura Security Fabric displays an error message if you select items that conflict with security rules .

Bravura Security Fabric enters the request into the authorization workflow.

Request access to a folder (multiple groups)

This use case demonstrates the process a user would follow to request access to a shared Sales folder.

The user could request access to the appropriate group that would provide them access to the folder, however, in most instances, a user would not know which group that would be. An alternative is to set up network resources and allow the user to request access to the shared folder. Bravura Identity will do the work in the background to enable the access.

Before a user can request access to the Sales folder, the following is required:

A folder named Sales is shared on a Microsoft Windows file server.
Groups have been used on the share to apply security, and those groups are managed by Bravura Security Fabric .
An Active Directory DN target has been added, and is configured to manage network resources.
Authorization has been set on the groups.
The share is added to Bravura Identity as a network resource.

To request access to the Sales folder:

From the main menu, click Request access to network resources in the My profile section.
Click Shares/Folders.
Select the Marketing folder.
Click the search icon next to the folder that you want to access.
The groups that have privileges to that folder appear on the right-hand side.
Select the check box to join a group to access the Sales folder.
You could continue to select more folders/groups that you want to access.
Tip
Although you can select multiple groups that have access to the same folder, the best practice is to choose correct privileges by selecting one group. This can be forced, as shown in Request access to a folder (single group).
If required, type Requester notes.
Requester notes are required if the IDR REQUIRES REASON NEWREQUEST option is enabled.
Click Complete.
Click OK to confirm the request.
Bravura Security Fabric enters the request into the authorization workflow.

The Workflow Manager Service routes the request to the selected group owner for authorization. After authorization is complete the Transaction Monitor Service runs a connector program that adds the user to the selected groups on the target system and the user will have access to the Sales and Public Relations folders.

Request access to a folder (single group)

This use case demonstrates the process a user would follow to request access to a shared Public Relations folder.

A network resource has been set up to allow the user to request access to the shared Public Relations folder. By default, a user can request access to several groups at a time. In this use case however, the IDR NETWORK RESOURCE SELECT ONE GROUP system variable has been enabled, restricting the users to requesting access to one group at a time. In this case, the user can choose between a group that has read-only access or read and write access.

Before a user can request access to the Public Relations folder, the following is required:

A folder named Public Relations is shared on a Microsoft Windows file server.
Groups have been used on the share to apply security, and those groups are managed by Bravura Security Fabric .
An Active Directory DN target has been added, and is configured to manage network resources.
Authorization has been set on the groups.
The share is added to Bravura Identity as a network resource.

Configure the IDR NETWORK RESOURCE SELECT ONE GROUP system variable

Log in to the front-end as superuser.
Click Manage the system > Modules > View and update profile (IDR).
Enable the IDR NETWORK RESOURCE SELECT ONE GROUP variable.
Enabling this variable will restrict the users to requesting one group/resource at a time.
Click Update.

To request access to the Public Relations folder:

From the main menu, click Request access to network resources in the My profile section.
Click Shares/Folders.
Select the Marketing folder.
Click the Public Relations folder.
The groups that provide the privileges to the Public Relations folder are listed on the right hand side.
If required, type Requester notes.
Requester notes are required if the IDR REQUIRES REASON NEWREQUEST option is enabled.
Click Request in the appropriate group row.
Bravura Security Fabric enters the request to join this group into the authorization workflow.
Joining this group will provide the user with read and write access to the Public Relations folder.

The Workflow Manager Service routes the request to the selected group owner for authorization. After authorization is complete the Transaction Monitor Service runs a connector program that adds the user to the selected group on the target system and the user will have access to the Pubic Relations folder.

Request access to documents in SharePoint

SHARED IN CONFIG AND END USER DOCS

This use case demonstrates the process a user would follow to request access to a document library in SharePoint.

Before a user can be granted access to a document library in SharePoint, the following is required:

A document library has been created in Windows SharePoint.
At least one document exists in the document library.
Users have at least read privileges to the SharePoint site. In this use case, the ”domain users” Active Directory group has been added to the SharePoint Visitors group.
The Visitors, Members, and Owners SharePoint groups all have owners.
A SharePoint target has been added to Bravura Security Fabric , and is configured to manage SharePoint network resources.
The document library is added to Bravura Security Fabric as a network resource.

To request access to the document library:

From the main menu, click Request access to network resources in the My profile section.
The Request access to network resources page appears.
Click Documents .
Bravura Security Fabric displays available document libraries on the right hand section.
Select the document library in the right hand section.
Bravura Security Fabric displays available resources in the document library.
You can click the icon next to the various folders to view privileges.
Click the icon next to Documents .
The privileges are displayed on the right hand side.
Select a group that gives you the privileges you want.
If required, type Requester notes .
Requester notes are required if the IDR REQUIRES REASON NEWREQUEST option is enabled.
Click Complete.
Bravura Security Fabric enters the request into the authorization workflow.

The Workflow Manager Service routes the request to the selected group owner for authorization. After authorization is complete the Transaction Monitor Service runs a connector program that adds the user to the selected group on the target system and the user will have access to the Sales folder.

Request access to a printer

This use case demonstrates the process a user would follow to request access to a shared network printer.

Before a user can be granted access to a printer, the following is required:

A network printer has been shared and listed in Active Directory.
A printer is added to Bravura Security Fabric as a network resource.
Security has been set up on the printer using Active Directory groups.
The Active Directory groups used for security have owners.
The Run as checkbox has been selected for the administrator credentials for the Active Directory target system.

To request access to the document printer:

From the main menu, click Request access to network resources in the My profile section.
The Request access to network resources page appears.
Click Printers.
Bravura Security Fabric displays available printers on the right hand side.
Select HID Example Printer.
Bravura Security Fabric displays available printers on the network.
You can click the icon next to the various printers to view privileges.
Click the icon next to HID example printer.
The privileges are displayed on the right hand side.
Select the IT-Application Support group and click Continue.
Bravura Security Fabric enters the request into the authorization workflow.

The Workflow Manager Service routes the request to the selected group owner for authorization. After authorization is complete the Transaction Monitor Service runs a connector program that adds the user to the selected group on the target system and the user will have access to the printer.

In this section: