How to Submit an Access Request

Tasks currently supported in the self service portal are shown in the table below. Select an access request from the table to jump to the instructions on requesting the access.

Access Type	Summary of Access

Access Type	Summary of Access
Self-Service Portal	Grants a user access to submit service requests in the Self-Service Portal for the organization the access request’s asset is linked to. For more information on Self-Service Portal access navigate to the Self-Service Portal page.
Client Communication Center	Grants a user access to the Client Communication Center Dashboard for the organization the access request’s asset is linked to. For more information on the Client Communication Center navigate to the Client Communication Center page.
Create sFTP Service Account	Creates an sFTP (Secure File Transfer Protocol) service account for the asset the access request is linked to. This account should be used for integration (i.e. used by a program not by a user). For more information on sFTP accounts navigate to the SFTP page.
Create sFTP User Account	Creates an sFTP (Secure File Transfer Protocol) user account for the asset the access request is linked to. For more information on sFTP accounts navigate to the SFTP page.
Update sFTP Account From IP Address	Updates the IP address the sFTP account can be accessed from. Note: This action updates an existing sFTP account and does not require Manager approval.
Resend sFTP Account Credentials	Resends the credentials for accessing the sFTP account to your primary email. Note: This action requests information from an existing sFTP account and does not require Manager approval.
Update sFTP Account Credentials	Updates the credentials for accessing the sFTP account. Note: This action updates an existing sFTP account and does not require Manager approval.
Create RDC Account	Creates a Remote Desktop Connection account for the asset the access request is linked to. As part of the request, an OpenVPN account is created for access to the Windows server. For more information on RDC accounts navigate to the RDC User Guide page.
Reset RDC Account Password	Resets the Remote Desktop Connection account password and unlocks the account if the password expired. The new password will be emailed to your primary email address. Note: This action updates an existing RDC account and does not require Manager approval.
Resend OpenVPN Account File and PDF Guide	Resends the OpenVPN account file and PDF guide to your primary email address. Note: This action requests information from an existing OpenVPN account and does not require Manager approval.
Create Database Service Account	Creates a database service account on the asset the access request is linked to. As part of the request, an OpenVPN account is created for access to the database server. This account should be used for integration (i.e. used by a program not by a user). Database accounts requested for Windows enhanced environments will be granted read/write access. Database accounts created for all other environments will be granted read access. Note: Database service account passwords expire every 365 days. Passwords can be reset through the Access Management Tool.
Create Database User Account	Creates a database user account on the asset the access request is linked to. As part of the request, an OpenVPN account is created for access to the database server. This account should be used by the user requesting the account. Database accounts requested for Windows enhanced environments will be granted read/write access. Database accounts created for all other environments will be granted read access. Note: Database user account passwords expire every 90 days. Passwords can be reset through the Access Management Tool.
Reset Database Account Password	Resets the database account password and unlocks the account if the password expired. If a value is not provided for the new password, one will be generated and emailed to your primary email address. Note: This action updates an existing database account and does not require Manager approval.

Self-Service Portal

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab. This is where you will submit the access request.
Add an asset to the Assets table by selecting the “New Row” button.
Select the search icon to bring up a list of assets you have access to.
Note: If the asset you want to submit an access request for is not viewable in the asset list, you do not have access to the asset’s organization. Follow the steps for “Scenario 2: Existing Client” in the https://ibm-cds.atlassian.net/wiki/spaces/ICDSW/pages/1320910855 page to request access to the organization.
Select the asset from the list that you want to request Self-Service Portal access to. Obtaining Self-Service Portal access to one asset will grant you Self-Service Portal access to all assets linked to that asset’s organization.
Ex) Adding asset 10000-DEV will grant you access to all assets that are assigned to organization 10000 in the Self-Service Portal.
Click on the row in the Assets table of the asset you just added. This will link the asset to the access requested in the next step.
Add an access request to the Specific Access in the Environment table by selecting the “New Row” button.
Select the search icon to bring up the list of accesses to choose from.
Select the access type “Self-Service Portal” from the list.
Once selected, a warning message will popup indicating that you only need to request Self-Service Portal access for one asset per organization. Click “OK” to continue.
Enter a reason for requesting this access in the Justification field.
Save the record to submit the access request. You will receive an email notification when your access request has been approved or rejected.

Client Communication Center

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab. This is where you will submit the access request.
Add an asset to the Assets table by selecting the “New Row” button.
Select the search icon to bring up a list of assets you have access to.
Note: If the asset you want to submit an access request for is not viewable in the asset list, you do not have access to the asset’s organization. Follow the steps for “Scenario 2: Existing Client” in the https://ibm-cds.atlassian.net/wiki/spaces/ICDSW/pages/1320910855 page to request access to the organization.
Select the asset from the list that you want to request Client Communication Center access to. Obtaining Client Communication Center access to one asset will grant you access to the Client Communication Center Dashboard for the organization the asset is linked to.
Ex) Adding asset 10000-DEV will grant you access to the Client Communication Center Dashboard for the organization 10000.
Click on the row in the Assets table of the asset you just added. This will link the asset to the access requested in the next step.
Add an access request to the Specific Access in the Environment table by selecting the “New Row” button.
Select the search icon to bring up the list of accesses to choose from.
Select the access type “Client Communication Center” from the list.
Once selected, a warning message will popup indicating that you only need to request Client Communication Center access for one asset per organization and that you will be automatically subscribed to email notifications for that organization. You can unsubscribe at any time by following the unsubscribe option located in the notification emails. Click “OK” to continue.
Enter a reason for requesting this access in the Justification field.
Save the record to submit the access request. You will receive an email notification when your access request has been approved or rejected.

Create sFTP Service Account

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab. This is where you will submit the access request.
Add an asset to the Assets table by selecting the “New Row” button.
Select the search icon to bring up a list of assets you have access to.
Note: If the asset you want to submit an access request for is not viewable in the asset list, you do not have access to the asset’s organization. Follow the steps for “Scenario 2: Existing Client” in the https://ibm-cds.atlassian.net/wiki/spaces/ICDSW/pages/1320910855 page to request access to the organization.
Select the asset from the list that you want to create an sFTP service account for.
Click on the row in the Assets table of the asset you just added. This will link the asset to the access requested in the next step.
Add an access request to the Specific Access in the Environment table by selecting the “New Row” button.
Select the search icon to bring up the list of accesses to choose from.
Select the access type “Create sFTP Service Account” from the list.
Enter a reason for requesting this access in the Justification field.
Enter an account ID for the sFTP account in the sFTP Account ID field. The account ID can only contain numbers and lowercase letters. Do not include the “sftp” prefix in the account ID.
Enter the IP address(es) where you will be accessing the sFTP account from in the From IP Address field. You can provide a single IP address, a comma delimited list, and/or a range. The value “*” can be used to allow access from all IP addresses.
Save the record to submit the access request.
You will receive an email notification to your primary email address when your access request has been approved or rejected. If the access request has been approved you will also receive a set of emails detailing how to access the sFTP account. One of the emails will contain an encrypted zip file. The password used to decrypt and open the zip file is located in the sFTP access record.

Create sFTP User Account

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab. This is where you will submit the access request.
Add an asset to the Assets table by selecting the “New Row” button.
Select the search icon to bring up a list of assets you have access to.
Note: If the asset you want to submit an access request for is not viewable in the asset list, you do not have access to the asset’s organization. Follow the steps for “Scenario 2: Existing Client” in the page to request access to the organization.
Select the asset from the list that you want to create an sFTP user account for.
Click on the row in the Assets table of the asset you just added. This will link the asset to the access requested in the next step.
Add an access request to the Specific Access in the Environment table by selecting the “New Row” button.
Select the search icon to bring up the list of accesses to choose from.
Select the access type “Create sFTP User Account” from the list.
Enter a reason for requesting this access in the Justification field.
Enter the IP address(es) where you will be accessing the sFTP account from in the From IP Address field. You can provide a single IP address, a comma delimited list, and/or a range. The value “*” can be used to allow access from all IP addresses.
Save the record to submit the access request.
You will receive an email notification to your primary email address when your access request has been approved or rejected. If the access request has been approved you will also receive a set of emails detailing how to access the sFTP account. One of the emails will contain an encrypted zip file. The password used to decrypt and open the zip file is located in the sFTP access record.

Update sFTP Account From IP Address

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab to view your accesses.
Click on the row in the Assets table of the asset linked to the sFTP account. This will list all of the accesses for this asset in the Specific Access in the Environment table.
Click the dropdown button for the sFTP account you want to update.
Edit the From IP Addresses field to the desired IP address(es) where the sFTP account can be accessed from. Updating this field will replace the current IP address(es) the account can be accessed from. To include the current IP address(es) enter a comma delimited list including the current IP address(es) and the new IP address(es).
Save the record to initiate the change request. You will receive an email notification when the IP address(es) have been successfully updated.

Resend sFTP Account Credentials

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab to view your accesses.
Click on the row in the Assets table of the asset linked to the sFTP account. This will list all of the accesses for this asset in the Specific Access in the Environment table.
Click the dropdown button for the sFTP account you want to request information for.
Scroll down to the Action section and click on the Resend Credentials button.
The record is automatically saved in this case. Once processed, an email will be sent to your primary email address that contains the sFTP account credentials in an encrypted zip file. The password used to decrypt and open the zip file is located in the sFTP access record.

Update sFTP Account Credentials

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab to view your accesses.
Click on the row in the Assets table of the asset linked to the sFTP account. This will list all of the accesses for this asset in the Specific Access in the Environment table.
Click the dropdown button for the sFTP account you want to update.
Scroll down to the Actions section and enter the new public key in the sFTP Account Public Key field.
Select the Update Credentials button to update the sFTP account credentials.
The record is automatically saved in this case. You will receive an email notification when the sFTP account credentials have been successfully updated.

Create RDC Account

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab. This is where you will submit the access request.
Add an asset to the Assets table by selecting the “New Row” button.
Select the search icon to bring up a list of assets you have access to.
Note: If the asset you want to submit an access request for is not viewable in the asset list, you do not have access to the asset’s organization. Follow the steps for “Scenario 2: Existing Client” in the page to request access to the organization.
Select the asset from the list that you want to create an RDC account for.
Click on the row in the Assets table of the asset you just added. This will link the asset to the access requested in the next step.
Add an access request to the Specific Access in the Environment table by selecting the “New Row” button.
Select the search icon to bring up the list of accesses to choose from.
Select the access type “Create RDC Account” from the list.
Enter a reason for requesting this access in the Justification field.
Save the record to submit the access request.
You will receive an email notification to your primary email address when your access request has been approved or rejected. If the access request has been approved you will also receive a set of emails containing the credentials for your RDC and OpenVPN accounts.

Reset RDC Account Password

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab to view your accesses.
Click on the row in the Assets table of the asset linked to the RDC account you want to reset the password for. Selecting an asset from the Assets table will list all of the accesses for this asset in the Specific Access in the Environment table.
Click the dropdown button to view the RDC account access record details and available actions.
Scroll down to the Actions section and click the Reset RDC Password button.
The record is automatically saved in this case. Once processed, an email will be sent to your primary email address containing the new RDC account password.

Resend OpenVPN Account File and PDF Guide

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab to view your accesses.
Click on the row in the Assets table of the asset linked to the OpenVPN account. This will list all of the accesses for this asset in the Specific Access in the Environment table.
Click the dropdown button next to the access record that contains the OpenVPN account you want to request information for.
Scroll down to the Actions section and click the Resend Account Information button.
The record is automatically saved in this case. Once processed, an email will be sent to your primary email address containing the OpenVPN account file and PDF guide.

Create Database Service Account

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab to view your accesses.
Add an asset to the Assets table by selecting the “New Row” button.
Select the search icon to bring up a list of assets you have access to.
Note: If the asset you want to submit an access request for is not viewable in the asset list, you do not have access to the asset’s organization. Follow the steps for “Scenario 2: Existing Client” in the page to request access to the organization.
Select the asset from the list that you want to create a database service account for.
Click on the row in the Assets table of the asset you just added. This will link the asset to the access requested in the next step.
Add an access request to the Specific Access in the Environment table by selecting the “New Row” button.
Select the search icon to bring up the list of accesses to choose from.
Select the access type “Create Database Service Account” from the list.
Enter a reason for requesting this access in the Justification field.
Enter an account ID for the database service account in the Database Account ID field. The account ID must:
- Contain the prefix dbsrv_.
- Only contain numbers and lowercase letters.
- Not exceed a length of 16 characters.
Save the record to submit the access request.
Once the access request is approved and granted, you will receive the credentials for the OpenVPN account and database account to your primary email address.

Create Database User Account

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab to view your accesses.
Add an asset to the Assets table by selecting the “New Row” button.
Select the search icon to bring up a list of assets you have access to.
Note: If the asset you want to submit an access request for is not viewable in the asset list, you do not have access to the asset’s organization. Follow the steps for “Scenario 2: Existing Client” in the page to request access to the organization.
Select the asset from the list that you want to create a database service account for.
Click on the row in the Assets table of the asset you just added. This will link the asset to the access requested in the next step.
Add an access request to the Specific Access in the Environment table by selecting the “New Row” button.
Select the search icon to bring up the list of accesses to choose from.
Select the access type “Create Database User Account” from the list.
Enter a reason for requesting this access in the Justification field.
The database account ID will be defined as “dbusr_" + your account’s person ID.
Save the record to submit the access request.
Once the access request is approved and granted, you will receive the credentials for the OpenVPN account and database account to your primary email address.

Reset Database Account Password

Sign into the Access Management tool:
https://devops.maximo.com
Navigate to the Access Management page by going to the application menu and selecting Security → Access Management.
Select your IBMid from the list of users. This will open the Person Information tab for your user.
Select the Manage Access tab to view your accesses.
Select the asset from the Assets table that the database account is linked to.
Select the > icon next to the database account access record in the Specific Access in the Environment table to view the access details.
Scroll down to the Actions section.
Enter a new password in the New Database Password field or leave blank for a password to be generated for you. If entering a new password, follow the password requirement based on the database type.
DB2: Passwords must be a minimum of 15 characters and contain a mix of two character types (uppercase, lowercase, numbers, special characters).
Oracle: Passwords must be 9-30 characters in length and contain at least two characters from each character type (uppercase, lowercase, numbers, special characters).
Select the Reset Database Password button to reset the database password. The new database account credentials will be sent to your primary email address.