Configuring Self-Provisioning

Ensure administrators can elevate their privileges when no humans are around to approve

Self-provisioning is an option for approval policies for any entitlement in your organization. At the bottom of any approval policy, toggle the "Self-Provisioning" toggle to ON.

Now, there are two decisions to make:

  1. When a user is eligible to self-provision, how long before this approval expires? Most customers choose 90 days to align with quarterly access reviews.
  2. What is the longest period of time a user can self-provision? Most customers choose 1 day, ensuring that high-privileged entitlements are only assigned for the day they are needed.

Whenever self-provisioning is enabled for an entitlement, all access requests will give the Approver the option to grant this eligibility to the requestor.

Users eligible to self-provision will see a one-click option to do so from their My Access page in Trustle.

When the Authorization window is close to expiring, users will receive a notification and the chance to request an extension. This ensures there is sufficient time for re-approval.

Matthew Hathaway