IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  IVIG UI Access Request

    Posted 01/13/26 12:51 PM

    Hi,

    Is there a way to remove/hide from the "Access Request" option the access that the user already has, since the user can see their current access in the "View Access" option?

    Tks



    ------------------------------
    Rudy Santos
    ------------------------------


  • 2.  RE: IVIG UI Access Request

    Posted 01/14/26 01:43 AM

    I am not sure what you mean here - if possible a couple of screenshots would be helpful to understand exactly what you mean.

    In general the ISC UI is driven by the Access model (allowed groups through Provisioning Policies/Role Compositions) and ACIs but I assume that what you are asking for here is something different - e.g. an overlap of data ? 



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------



  • 3.  RE: IVIG UI Access Request

    Posted 01/14/26 05:08 AM
    Edited by Rudy Santos 01/14/26 05:09 AM

    The idea is hide the access that was already granted. Just visual stuff. Example below. The group was granted for the user, but the user could see it as an access to be requested. 



    ------------------------------
    Rudy Santos
    ------------------------------

    Original Message


  • 4.  RE: IVIG UI Access Request

    Posted 01/16/26 02:05 AM

    Please create an IDEA for that : https://ibmsecurity.ideas.ibm.com/ 



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------

    Original Message


  • 5.  RE: IVIG UI Access Request

    Posted 01/14/26 02:15 AM

    Hello,

    I'm not sure if there is an out-of-the-box parameter for this, but I can suggest a workaround.

    You can use a flag attribute on the user.

    In the Request Access workflow, you first check whether this is the first request or not. If it is the first request, the flag on the user is set.

    If it's not the first request, you can exit the workflow by either sending an informational message or simply ending it without taking any action. Once the first request is completed, the flag is cleared.



    ------------------------------
    Selim BEKTAS
    Solution Architect
    Bilgi Birikim Sistemleri A.S.
    ------------------------------



Related Content