Skip to content

Remove extra step from Single Person Access Request instructions

Why is this change being made?

Currently, managers are expected to re-assign access request issues to the requester after approval. Then requesters are expected to re-assign to a provisioner. That feels like an unnecessary extra step. This eliminates the step by asking the manager to re-assign directly to a provisioner. This has the added benefit of eliminating the requester's need to perform a "critical infrastructure" assessment, as provisioners must perform that assessment anyway, and are generally much better equipped to do it.

Does this MR meet the acceptance criteria?

Conformity

Edited by Dan Jensen

Merge request reports