Access
The Access page provides a centralized overview of all access-related activities within Omada Identity.
It allows users and administrators to view, manage, and track different types of access requests and delegations through four tabs:
-
Access Requests – Displays all requests for new access, showing details such as requester, resource, system, approval status, and provisioning status. For more details on the access request process, see Access request.
This tab also displays two different kinds of valid from and valid to dates:
-
Requested valid from and Requested valid to – These columns (previously named Valid from and Valid to) display the requested validity period originally specified by the requester when submitting the access request. They represent the requester’s intended validity dates before any adjustments made during approval.
-
Effective valid from and Effective valid to – These columns show the actual validity period applied to the resource assignment after approval. The values reflect any changes made by the approver to the valid from and valid to dates of the resource assignment, including revoking or expiring access. These columns always display the current state of those fields.
-
Violation status: - This column shows whether an assignment violates any policies or requires a decision. You can use this status to determine whether an assignment is compliant, in a Violation, or Pending evaluation. If a violation requires a decision, the system highlights it so you can take action.
-
Provisioning status - This column shows the current state of the assignment in the provisioning process. You can use this status to track whether access has been successfully provisioned, is in progress, or has not yet been set. This helps you understand if the requested access is already available or still being processed.
-
-
Delegations – Lists active delegations that allow one user to act on behalf of another for specific resources or actions, along with their activation and expiration details. For more details on access delegation, see Delegate access.
-
Written Requests – Shows manually submitted access requests, including request reasons and validity periods.
-
Extend Access Requests – Contains requests to extend the duration of existing access assignments, with information about the requested validity period and request status. For more details on extending access requests, see Extend access.
Violation and provisioning status on child assignments
In the Access requests tab, you can see additional details about child assignments directly in the table and in the child assignments panel. The Violation status column includes a new value, The assignment has a child with a pending decision, which indicates that a child assignment requires a decision. The system shows this status with an orange indicator.
You only see this value if the Show child assignment violations customer setting is enabled. When you enable this setting, the system evaluates child assignments when loading the Access requests tab. This evaluation is currently limited to 100 child assignments per request and may affect performance.
When you open an access request, the child assignments panel includes Violation status and Provisioning status columns. These columns show the status of each child assignment and align with the information displayed in the table.
You only see violation information for direct child assignments. Violations in deeper levels are not shown.
Display and filtering
The tabs display access- and approval-related information stored in tables. The columns organize data per creation date, access reference key, the name of the beneficiary, the name of the requester, approval status, and more relevant parameters.
Each tab includes customization options such as Columns, Filters, and Density to tailor the displayed data, as well as pagination controls for navigating through records.
When using search filters, take into account that the search filter operates by matching the first letters of the word you are searching.
Access reference key
The Access reference key is a system-generated identifier that uniquely identifies each resource assignment created through an access request.
When the setting Create unique assignment code IDs for resource assignments is Enabled, the system generates a reference key for each new resource assignment. You can use this key to quickly identify and reference a specific assignment across access requests, approvals, and support processes.
The key is a 6-character uppercase alphanumeric value, for example, A7K2Q9, and is assigned per resource assignment, not per access request.
The following table describes how the Access reference key behaves in different scenarios:
| Scenario | Behavior |
|---|---|
| Setting Enabled | The system generates a key for each new resource assignment created through an access request. |
| Setting Disabled | The system does not generate keys for new assignments. |
| Existing assignments before enabling | Existing assignments are not updated with a key. |
| Assignment moved during identity transfer | The existing key is preserved. |
The Access reference key is system-generated and intended for reference purposes only. Assignments created outside the access request flow might not have a key, and empty values can appear for assignments created before the setting was enabled.
Access request overview through the Assignment Timeline
You can use the Assignment Timeline to verify the progress of the access request in detail. It allows you to review the steps that have already been completed, steps remaining, users/groups involved, and also the status of the background processes for this request.
To open the Assignment Timeline, locate the access request you want to review, click the ellipsis (three dots), and then Assignment Timeline.
Color-coded indicators are used to present the status each step:
-
green - approval
-
yellow - action pending
-
white - the step is not started
-
red - rejection
The Access link in the navigation pane allows you to view all the questions assigned to you. At the top, you will find different tabs based on your permissions and workflow steps. To view questions in each step, simply click on the corresponding tabs.
You can answer questions in bulk by selecting them all, choosing your answers, and then clicking Submit. It's crucial to submit your answers before closing the tab, as there is no option to save your changes for later retrieval.
Please note that the Decision field is no longer optional, as it was in the legacy Access flow. It is now mandatory for processing.
If there is a mandatory column, a red indicator will appear, indicating that you need to complete it. You must fill out these fields in order to enable the submit button.
Clicking on the ellipsis menu under More allows you to access additional information about the form. However, editing is not possible.
The steps and assignees may change based on the decisions made.
Cancelling a request
If you are the requester or beneficiary, you can cancel an access request in the pending state:
-
In the More column, click the ellipsis (three dots) button.
-
Confirm the operation.
The request is now cancelled.
You can cancel one request at a time using the UI, and more than one request using the API. Assignees can be notified through an e-mail about the cancellation. The survey created after the access request is closed if all related resource assignments are cancelled (or has already been answered).