Enterprise Administration Guide › Using Privileged Accounts › Respond to a Privileged Account Request

Respond to a Privileged Account Request

If you have the default PUPM Approver role or an equivalent role assigned, you can respond to pending privileged account access requests submitted by users. You can respond with one of the following actions:

• Approve—Approve the request and let the user check out the privileged account.
• Reject—Reject the privileged account request.
• Reserve Item—Reserve the request for later consideration. When you reserve a request, CA Access Control Enterprise Management removes this work item from work lists of other approvers. You can return to this item later and approve or reject it.
• Release Item—Release the request for others to respond to. You can only release an item that you previously reserved for yourself.

You can also add additional approvers and reassign the work item so that they too receive it in their pending approvals.

Note: Break Glass checkout requests are displayed in the Waiting For My Approval list of requests. However, you do not need to approve or reject these requests. These requests are displayed only as a notification that a user checked out a Break Glass account.

Note: To respond to a privileged account request, a user must have the PUPM Approver privileged access role and be the requesting user's manager.

To respond to a privileged account request

1. Click Home, My Accounts, Waiting For My Approval.

   A list of pending privileged account requests appears.

2. Click the pending request that you want to consider.

   The Approve Privileged Account Request page appears.

3. (Optional) To add approvers for this request, follow these steps:
   1. Click Add Assignees.

      The Select User search pane opens.

   2. Select an attribute for the search, type in the filter value, and click Search.

      A list of users that match the filter criteria appears.

   3. Select the users you want to add and click Select.

      The user is added to the approvers list.

4. (Optional) Review request details and modify required parameters, as follows:
   1. Click the Privileged Account tab.

      The Privileged Account tab appears, displaying the account and request details.

   2. Use the Valid Until field to override the checkout expiration timeout.
   3. Use the Ticket Number field to review the Unicenter Service Desk ticket.
   4. Type a comment to explain your response to the request.
5. Do one of the following:
   • Click Approve.

     The request is approved, removed from the list of pending requests, and the requester can now check out the privileged account.

   • Click Reject.

     The request is rejected and removed from the list of pending requests.

   • Click Reserve Item.

     The request is reserved for you and removed from the list of pending requests of other approvers.

   • Click Release Item.

     The request is released to all other approvers. You can only release items that you reserved.