Request access to accounts

This topic describes how to request access to accounts in a dual control environment, manage your requests, and track them.

Overview

If your environment uses dual control functionality, to access an account, you must first request access from an authorized user, and the authorized user must confirm your request.

You can request access to one account or request access to multiple accounts at one time. When requesting access to multiple accounts, a separate request is sent for each account. As you receive confirmation for each account, you can access that account. You don't have to wait until all your requests are confirmed.

Request access to accounts

Request access to a single account

1. Select Accounts > Accounts & Requests.

2. In the Accounts View page, locate the account that you want to access, and do one of the following:

   • Click Request connection and select the connection type (more than one selection type may exist for an account).

   • Click more options and select Request show or Request copy.

3. If a reason is required, enter the reason for the request in the Reason area.

4. If this account's platform is integrated with a ticketing system, in the Ticket information area, select the ticketing system and then enter your Ticketing ID.

5. If the account is a remote machine, in the Remote Connection Details area, enter the address of the remote machine. You can specify multiple machines or any machine:

   Remote connection	Machine address
   Multiple machines	Separate each machine with a comma. For example, 1.1.1.174, 1.1.1.228, 1.1.1.235
   Any machine	Enter an * (asterisk)

   If a preconfigured list of addresses is defined for this account, you can only select a machine from the All Addresses list. The account can also be configured to enter an address or choose an address from a predefined list.

6. To access the account within a specific timeframe, select Request timeframe and enter the following information:

   • The date and time for when you want the timeframe to begin and end.

   • If you want to access the account more than once during the selected timeframe, select Multiple access is required.

7. To view who must confirm your request, click Confirmers List.

8. Click Send Request.

By default, confirmation of a connection request allows you to show, retrieve, or copy the password or SSH key. However, the system can be configured to restrict users who request access to an account by only allowing the connection, and not allowing the user to show, retrieve, or copy the account's password or SSH key. This restriction is only effective when access is through the PVWA web portal or the mobile PVWA.

If your system is configured to send notifications for new requests, a notification is sent to all the authorized users who are required to confirm the request.

Request access to multiple accounts

1. Select Accounts > Accounts & Requests.

2. In the Accounts View page, do one of the following actions, and then click Request access.

   • Click the checkbox for each account that you want to access

   • Click the checkbox at the top of the list to select all accounts

   You can select multiple accounts in any view or search result.

3. If a reason is required, enter the reason for the request.

4. To access the account within a specific timeframe, select Request timeframe and enter the following information:

   • The date and time for when you want the timeframe to begin and end.

   • If you want to access the account more than once during the selected timeframe, select Multiple access is required.

5. Click Next.

6. If any of the platforms of the selected accounts are integrated with a ticketing system, in the Ticket information area, select the ticketing system and then enter your Ticketing ID .If the accounts are on different platforms, you must select the ticketing system and enter your Ticketing ID for each platform.

   • If you do not enter ticketing system information for accounts that are configured with a ticketing system, the request will not be sent for confirmation.

   • The following parameters are not supported when requesting access for multiple accounts:

     • DisableDualControlForIncidentTicket

     • DisableDualControlForChangeTicket

   • Bypassing the ticket system configuration is not supported when requesting access to multiple accounts.

7. Click Send Request.

   Confirmation of multiple account connection requests allows you to show, retrieve, copy and connect with passwords or SSH keys.

   After you submit the request, you can track the progress of your request in the Progress pop-up. If you go to another page or view, the Progress pop-up is shown until all requests have been sent. If any of the requests have failed, a notification appears that lists the failed requests.

View your requests

1. Under Accounts > Accounts & Requests, click My Requests.

2. In the Confirmed and pending requests list, you can view the status of your requests.

3. Click a request to view the details of the request or the user(s) who must confirm your request.

   The Request ID is unique to each Safe.

4. Click another view to see your requests organized according to another status:

   • Pending requests

   • Pending, expired and rejected requests

     Expired requests are requests whose timeframe expired before they were confirmed.

   • All requests

Delete a request

1. In the My Requests page, locate the request that you want to delete.

2. On the right side of the row, click Delete.

If your system is configured to send notifications when requests are deleted, a notification is sent to all the authorized users who are required to confirm the request.