Access management tool overview

User Roles

The Access Management Tool supports two user roles - standard users and manager users. Manager users have elevated accesses to manage the tool for their customer

Manager User

A manager user is a user in the Access Management Tool with a role assignment of MANAGER. Manager user responsibilities include:

  • Adding/removing users to the tool.
  • Granting users access to the customer they are managing.
  • Reviewing access requests.
  • Viewing, modifying, and removing user accesses.
  • Standard user responsibilities.
Standard User

A standard user is a user in the Access Management Tool with a role assignment of STD_USER. Standard user responsibilities include:

  • Submitting access requests.
  • Viewing, modifying, and removing their accesses.
  • Deactivating their user account.
If you wish to inspect which user role has been allocated to a particular user, follow the step as mentioned.
  1. Log in to the Self-Service Portal.
  2. Navigate to the Go to Applications tab and select Security.
  3. Click on Access Management. The Access Management dashboard appears. Click on a user among the list of users to inspect the role.
  4. The Role field would be populated by MANAGER for the manager role or STD_USER for a standard user role.

Tool Overview

List View

The List View page is the homepage of the Access Management Tool. This is where you can view the user accounts you have access to. Manager users can view user accounts that have access to the customer they are managing from this page. Standard users can view their user account from this page.

  1. To access the List View, login to the self-service portal.
  2. Navigate to Security>Access Management.
  3. You will be presented with a List View of the accounts.
Person Information
The Person Information tab contains user account details. These details include the user’s IBMid, name, email address, role, and customer(s) they have access to. This tab will also contain the customer a user is managing if they are a manager user.
  1. To access the Person Information tab, login to the self-service portal.
  2. Navigate to Security>Access Management.
  3. In the List View, click on the IBM ID of the user whose person information you wish to see
  4. You will now see the Person information tab.
Manage Access

The Manage Access tab contains the user account’s existing and pending accesses. Access records are filtered by selecting the asset in the Assets table. Once selected, accesses for the selected asset can be seen in the Specific Access in the Environment table below. In addition to viewing accesses, users can submit access requests for their user account from this tab. Go to the How to Submit an Access Request wiki to read more about requesting accesses.

  1. To access the Manage Access tab, login to the self-service portal.
  2. Navigate to Security>Access Management.
  3. In the List View, click on the IBM ID of the user whose access you wish to manage.
  4. Click on the Mange Access tab, next to the Person Information tab.
  5. You can now manage access for the user.
Access Approvals

The Access Approvals tab is where manager users review access requests submitted for the customer they are managing. This tab is only accessible through the manager user’s account. Go to the How to Approve/Reject an Access Request wiki to read more about reviewing access requests.

  1. To access the Access Approvals tab, login to the self-service portal.
  2. Navigate to Security>Access Management.
  3. In the List View, click on the IBM ID of the user whose access approvals you wish to manage.
  4. Click on the Access Approvals tab, next to the Mange Access tab.
  5. You can now manage access approvals for the user .