Assign Hyperion Role in Identity Self-Service 2.0


Date: 04/17/2017

Revision History:

Date / Version / Author / Comments
12/14/2016 / 1.0 / Haritha / Initial Create
04/17/2017 / 2.0 / Page 10 / Added Role Justification comments box.

Target Audience: IAM Administrator, Departmental Authority (DAD) and Departmental Requester.

Purpose: How to assign Hyperion Role to users in Identity Self-Service they have authority over.

Work Flow for Request Role:

Work Flow for Approving a Medium Risk Role (Risk Level 5)

Request Role:

In this example, we are demonstrating how to request access for users in Identity Self-Service system they have authority over.

Step 1:

·  Login to Identity Self-Service Portal using your Production User ID and Password

o  https://sso.iam.fiscal.ca.gov/identity

·  Upon Successful Login you will be placed on Identity Self-Service Portal landing page

Step 2: Click on Request Access tile selection to request access for a user in Identity Self-Service system.

·  This action will display the Option, click on Request for others

·  This action will display the list of users form that Organization

Step 3: Select the user by clicking the Add button

·  Note if the user selected is correct

·  Click Next

·  The Role catalog will be displayed

·  Check only Hyperion role from categories (By default all applications will be selected/checked)

·  Select required role and click on Add To Cart (selected Hyperion Viewer)

·  Click Next

·  The selected role information will be displayed and is ready for checkout.

·  Enter any comments in the Role Justification box for approver (if needed).

·  Cross Check all the information and click on submit.

·  Upon Submit Following message will display

You have successfully Submitted request to Hyperion role for a user in your Organization. Approval request is sent to DAD.

Step 4: Follow “Approve Pending Requests Job Aid” logging in as DAD and approve request.

·  Upon Approve Following message will display “Your Request was processed Successfully”

Hyperion role request for a user approved successfully by DAD and sent to Access Review Team for next Approval as mentioned in Work Flow.

Step 5: Repeat Step 4 logging in as Access Review Team and approve request.

Hyperion role request for a user approved successfully by Access Review Team and sent to Fulfillment Admin for next Approval as mentioned in Work Flow.

Step 6: Follow Job Aid “View Pending Approvals Job Aid” logging in as Fulfillment Admin and open the Request.

Step 7: View the User information for that Request by clicking on Request Details Tab and note the User login.

Step 8: Follow “View User Job Aid” and view user information (from Step 6)

esp. Primary BU and Additional BU. Click on Modify and make changes if necessary.

Step 9: Repeat Step 4 to approve the request as Fulfillment Admin.

Hyperion role request for a user approved successfully by Fulfillment Admin

Step 10: Repeat Step 7 and click on roles tab to view the Hyperion Role assigned to user. Hyperion role displayed in users roles list.

You have successfully assigned a Hyperion role to a user in your Organization.

FI$Cal.329 Request Hyperion Role Job Aid 2.0 Page 1 of 12

Updated: 04/17/2017