JiT Reason Formats

When sending an access request, the user provides a reason for it. By default this is free-form text, which makes the reason hard to process automatically - for example by an external ticket system that reads reasons submitted in Fudo Enterprise.

To obtain reasons in a predictable form, define a reason format - a named set of fields that the user fills in instead of writing free text. Fudo Enterprise validates the entered values and composes the reason itself, as one field name: value line per field.

Note

Defining formats does not change the existing behaviour. Free-form text remains available and is the default option, and as long as no format is defined, access requests work exactly as before.

Creating a Reason Format

  1. Select Settings > Resources and go to the JiT Reason Formats tab.

../../_images/6-2-jit-reason-formats-list.png

  1. Click Add Reason Format.

  2. Enter the Name of the format. This is the name the user selects when sending a request.

  3. Optionally select the Description option and describe the format. The description is displayed to the user after they select the format.

  4. In the Fields section, enter the Field name and select the Type of the field:

    • Text - the user enters any text,

    • Number - the user enters a number,

    • Constant - a fixed value that you enter yourself in the Value field. The user does not fill it in and cannot change it.

  5. Click Add field to add further fields, or Remove to delete a field.

../../_images/6-2-jit-reason-format-edit.png

  1. Click Save.

Note

  • Every field of a format is required. The user cannot send a request until all of them are filled in, so a composed reason never contains an empty value.

  • Fields appear in the order in which they were added. The order cannot be changed later - to move a field, remove it and add it again.

  • Field names, values of Constant fields and text entered by the user cannot contain line breaks, because line breaks separate the composed lines.

Scope and Limitations

Note

  • Defined formats are available for all requests for access to accounts and resources. They cannot be limited to a selected safe.

  • Formats are not available for requests for access to secrets in the Password Vault, nor for requests coming from another Fudo Enterprise connected through Fudo ShareAccess. Those requests keep a free-form reason.

  • A free-form reason may be up to 250 characters long; a reason composed from a format may be up to 1024 characters.

  • The stored reason is ordinary text. It does not record which format was used, so it cannot be proven from the reason alone that a format was applied.

Warning

Managing reason formats requires the access-request-modify privilege. Viewing them requires access-request-read.

Related topics: