Overview
Resource-centric access Request (RCAR) is a new feature across Okta Identity Governance that has been introduced to streamline the catalog experience for end users. This feature leverages some of the same approval flows within Access Requests but provides a much cleaner end user experience when requesting access. For now, both methods will be supported.
Managing Configurations lists was manual when using Access Requests, and using Access Request Teams could sometimes be confusing. In RCAR, these items are no longer required to build Access Requests using Request access. However, they are still being utilized by the existing Request Types.
To understand more about RCAR visit the Access Requests guide.
Solution
The following provides information about this new feature
The Request access button is now visible and that is how users will select RCAR requests.
If no applications are enabled for RCAR or Govern Okta admin roles are not enabled, clicking it may show an empty catalog. Once an application application or Govern enable Okta admin roles you will see those options in a tile like catalog.
- Access Request Teams, while still being used by customers leveraging the existing Access Request Types, are no longer used when managing new RCAR requests. Super Admins and Access Request Admins are now the new managers of RCAR requests and during a request those roles will be dynamically assigned as the Request Assignee! Refer to Access Requests Considerations for more details.
- Configuration lists are no longer required by RCAR. This new enhancement leverages groups or bundles assigned to an application within a Condition. They will be displayed as the list of requestable resources. This approach allows any request to dynamically pull the list of groups or bundles directly from Okta without worrying about periodic synchronization tasks. This streamlines the end user experience as well as simplifies the admin experience.
Group Request Condition
This setting within the conditions will result in this view for the end user during the request.
Bundle Request Conditions
This setting within the conditions will result in this view for the end user during the request.
