In Saviynt's Access Request configurations, the following can be set up as either optional or mandatory based on business requirements:
A. Approval comments: When an approver approves or rejects a request, they can be required to provide comments, or it can be made optional.
B. Add Attachment: Requesters can be allowed or required to attach supporting documentation to their access requests.
C. Business justification at Request level: Requesters can be obligated to provide a business justification for their access request, or it can be made optional.
Here's a breakdown with Saviynt IGA references:
Saviynt's Access Request System (ARS) Configuration: Saviynt provides granular control over the ARS's behavior, allowing administrators to customize various aspects of the request process, including data validation and required fields.
Mandatory vs. Optional Fields: Many fields and actions within the ARS can be configured as either mandatory or optional. This allows organizations to tailor the request process to their specific needs and compliance requirements.
Configuration Locations: These settings are typically found within the ARS configuration section of Saviynt's administrative interface.
Approval Comments: Often configurable within the workflow definition, at the approval step level. You can define whether comments are required for approval, rejection, or both.
Add Attachment: Generally found under general ARS settings, allowing you to enable or disable attachments and potentially set them as mandatory.
Business Justification: Also found within the ARS settings, allowing you to toggle the requirement for a business justification at the request level or even at the individual entitlement level.
Business Rationale: The flexibility to make these elements optional or mandatory allows organizations to balance the need for information with the desire for a streamlined user experience. For example, high-risk access requests might require detailed justification and attachments, while low-risk requests might not.
Saviynt's Audit Trail: Regardless of whether these fields are mandatory or optional, Saviynt's audit trail will capture the information provided, ensuring a complete record of the request and approval process.
In summary: Saviynt's ARS allows administrators to configure approval comments, attachments, and business justifications as either optional or mandatory, providing the flexibility to adapt the access request process to meet diverse organizational needs and compliance requirements.
