16.3 Checking the Status of Your Requests
The action allows you to see the status of your role requests, including requests you’ve made directly as well as role assignment requests for groups for containers to which you belong. It lets you see the current state of each request. In addition, it gives you the option to retract a request that has not been completed or terminated if you have changed your mind and do not need to have the request fulfilled.
The action shows all role assignment requests, including those that are running, pending approval, approved, completed, denied, or terminated. The action also shows requests made to create role relationships through the action.
What you can see and do on the View Request Status page depends on your security role, as described below:
Table 16-1 Capabilities of Each Security Role
Large result sets By default, the View Request Status retrieves up to 10,000 request objects. If you attempt to retrieve a larger result set, you will see a message indicating that you have reached the limit. In this case, you should narrow your search (by specifying a particular user or status, for example) to limit the number of objects returned in the result set. Note that when you apply a filter to a role name, the filter limits what you see and its order, not the number of objects returned.
To look at your role requests:
-
Click in the list of actions.
The User Application displays the current status of role requests for the currently authenticated user.
The columns in the role request list are described below:
-
The column provides the name of the role specified for the request.
-
The column identifies the user who made the request.
-
The column identifies the user, group, or container that will receive the role, if the request is approved. In the case of role relationships, the column shows the name of the role related to the role named in the column.
-
The column shows a detailed status for the request as well as an icon that indicates the status summary. The status summary shows the general status of the request and can be selected from the Filter menu to narrow the results when searching for requests with a particular status:
NOTE:If the system clock on the server where the Role Service driver resides is not synchronized with the system clock on the server where the User Application is running, the request status might appear to be different on the View Request Status and Role Assignments pages. For example, if you request a role assignment that does not require approval, you might see the status as Provisioned on the View Request Status page, but the status on the Role Assignments page shows Pending Activation. If you wait for a minute or so, you might then see the status on the Role Assignments page changes to Provisioned. To ensure that the status is shown correctly throughout the User Application, check your system clocks to be sure they are synchronized appropriately.
-
The column shows the date when the request was made.
-
The column shows the description provided by the requester at the time the request was made.
-
-
You can filter the list of requests, as follows:
-
To view only those assignments that start with a particular string of characters, see Filtering Data for information about what to type in the box.
-
To view only those requests that apply to a particular user, use the or the tool to select the user. To see your own requests, you need to select yourself from the User list. For details on using the and tools, see Using the Object Selector Button for Searching.
NOTE:The User control is not available if the logged in user is not a Role Module Administrator or Role Manager.
-
To view those role requests that have a particular status summary, select the status in the drop-down list.
-
To view only those requests for which you are a requester, select the box.
NOTE:The control is not available if the current user is a Role Module Administrator or Role Manager.
-
To view only those requests for which you are a recipient, select the box.
NOTE:The control is not available if the logged in user is a Role Module Administrator or Role Manager.
-
To apply the filter criteria you’ve specified to the display, click .
-
To clear the currently specified filter criteria, click .
-
-
To set the maximum number of requests displayed on each page, select a number in the drop-down list.
-
To sort the list of requests, click on the column heading that contains the data you want to sort.
If several role assignment requests share a Common Requests ID, you might want to sort the data by the Initial Request Description to see the set of related requests together. The Common Requests ID is an internal identifier (shown only in the Request Details group box) that correlates a set of role assignments that were requested at the same time. Here are some situations in which a set of role assignments will share a Common Requests ID:
-
A single request assigns multiple roles to a single user.
-
A single request assigns a single role to multiple users. This might occur when a requester assigns a role to a group or container.
When a set of role assignments share a Common Requests ID, a user can retract each assignment individually. In addition, each role assignment can be approved or denied separately.
-
-
To see the details for a particular request, click on the status in the column and scroll down until you see the Request Details group box.
The Status field shows the status for the request, along with the status summary icon and text describing the icon. The icon (and the associated text) provides a convenient way to see the status at a glance. The table below shows how the various status codes are mapped to the status icons:
-
To retract a request, click .
The button is disabled if the request has been completed or terminated.
If a request shares a Common Requests ID with a set of related requests, you can retract each of the role assignments individually.
