11. User Access Management
This module allows users to self-service access and controls for users. It will also provide proper approval flows and audit trails to track how access changes over time.
11. User Access Management Productboard component link
11.01. User Onboarding and Off Boarding
Allows new users to be given access as well as users to have access removed at any time.
11.01.01. Onboard User — Add specific access or roles. Additionally access can be cloned from another user.
11.01.02. Offboard User — Remove the ability for a user to log in. The system will retain their old access levels for instances where a user will later need to be added back or copied to another person.
11.02. User Role Assignment and Changing
Allow for specific roles to be added to a user at a granular level.
11.02.01. View Only Access — By default, a user will be able to view all sections of the application.
11.02.02. Access control to actions — Specific access to actions or parts of a workflow will be restricted based on role.
11.03. User Data Access Management
Allows for users to be granted access to only specific data based on specified attributes. This could be Agents or Clients or Lines of Business.
11.03.01. View User Access — Provides visibility into a what data a user is able to view
11.03.02. Change User Access — Provides workflow for requesting and approving changes to a users data access
11.04. User Role Checking
Provides ability to warn a user in the event a security risk has been created by role assignment
11.04.01. Warning on conflicting roles — Warn a user if they try and assign two roles meant to be segregated
11.04.02. Audit Reporting — Allow for generating a report to checking access conflicts.
11.05. User Access Review
It is a good practice to review and certify that everybody who has access should have access and that the correct roles are assigned to each person.
11.05.01. Start Audit Review — Start a review that forces all users to be re-approved by their supervisors on an established periodic schedule.
11.05.02. Save Audit Report — Save the results of an audit as evidence that access was reviewed.