6.2 Approving, rejecting, and canceling requests

You can approve, reject, or cancel an outstanding request for a person; for example a request to issue a device.

Whether or not a request requires approval depends on the Validate Issuance setting in the credential profile; see the Working with credential profiles section in the Administration Guide for details.

To approve or reject a request, you must have permission to validate the credential profile; see the Constrain credential profile validator section in the Administration Guide for details. You also cannot be the operator who made the request, or the person who will receive the requested device.

6.2.1 Approving requests

To approve a request:

  1. Search for a request, and view its details.

    See section 6.1, Searching for a request.

    You can also view a request from any form that displays a link to the request.

    For example:

    • Click the entry in the list of requests in the REQUESTS tab of the View Person form.
    • Click the entry in the list of requests in the DEVICE REQUESTS tab of the View Device form.

  2. Click the Approve Request option in the button bar at the bottom of the screen.

    You may have to click the ... option to see any additional available actions.

    If this option is not available, the request does not require validation.

    The Approve Request screen appears.

  3. Review the details of the request.

    If the Change Credential Profile At Approval configuration option (on the Issuance Processes page of the Operation Settings workflow) is set, you can select a different credential profile from the drop-down list. You must have the appropriate permission to request the credential profile, and the target must have the appropriate permission to receive it.

    You can provide any additional Notes to state why you are approving the request.

    If the Set expiry date at request option (on the Issuance Processes page of the Operation Settings workflow) is set, you can set or amend the Maximum Expiry Date for the request. You can select any date up to the Maximum credential expiry date specified for the person (see section 4.4.1, Setting the person's status). Note, however, that you cannot exceed the Lifetime setting for the credential profile; if the request is made for a credential to expire on a date six months from now, but the credential profile has a lifetime of 30 days, the device will be issued with a lifetime of 30 days.

    The credential profile can override the Maximum credential expiry date set for the person if the Ignore User Expiry Date option on the credential profile is set.

    If maximum expiry date set in the request exceeds the Maximum credential expiry date set for the person, at approval, if the operator does not have permission to modify they date (that is, it is not shown on screen) the maximum expiry date for the request is reset to be the same as the date set for the person. This happens automatically; the updated date is also recorded in the audit, and the correct date is shown when subsequently viewing the request. In this scenario, if the operator does have permission to change the date in the request, the date validation highlights that it needs to be changed, and the operator cannot proceed until they have amended the date. The calendar control is constrained to the date set for the person.

    If you do not want to approve the request, click the Close button:

  4. To approve the request, click SAVE.

6.2.2 Rejecting requests

To reject a request:

  1. Search for a request, and view its details.

    See section 6.1, Searching for a request.

    You can also view a request from any form that displays a link to the request.

    For example:

    • Click the entry in the list of requests in the REQUESTS tab of the View Person form.
    • Click the entry in the list of requests in the DEVICE REQUESTS tab of the View Device form.

  2. Click the Reject Request option in the button bar at the bottom of the screen.

    You may have to click the ... option to see any additional available actions.

    If this option is not available, the request does not require validation. You can still cancel the request; see section 6.2.3, Canceling requests.

    The Reject Request screen appears.

  3. Review the details of the request, and provide any additional Notes to state why you are rejecting the request.

    The Notes are mandatory.

    If you do not want to reject the request, click the Close button:

  4. To reject the request, click SAVE.

6.2.3 Canceling requests

To cancel a request:

  1. Search for a request, and view its details.

    See section 6.1, Searching for a request.

    You can also view a request from any form that displays a link to the request.

    For example:

    • Click the entry in the list of requests in the REQUESTS tab of the View Person form.
    • Click the entry in the list of requests in the DEVICE REQUESTS tab of the View Device form.

  2. Click the Cancel Request option in the button bar at the bottom of the screen.

    You may have to click the ... option to see any additional available actions.

    The Cancel Request screen appears.

  3. Review the details of the request, and provide any additional Notes to state why you are canceling the request.

    The Notes are mandatory.

    If you do not want to cancel the request, click the Close button:

  4. To cancel the request, click SAVE.