Make a request
To make a request:
- Go to Secrets > Secret List.
- In the Secrets List, double-click a secret to open.
Alternatively, in Folders, go to the folder where the secret is located, and double-click the secret to open.
You can also go to Approval Request > My Requests, select Create, and skip to step 4.
If the secret does not show up, it may be because you do not have the necessary permission to access the secret or the folder where the secret is located.
-
On the top-right, click Make Request to send out a request to launch the secret.
If the Make Request option does not appear, it is because Requires Approval to Launch Secret or Requires Approval to Launch Job is disabled in the Secret Setting pane when creating or editing a secret.
See Creating a secret.
The New secret request window opens.
- Enter the following information:
Requester
The requester.
Note: The option cannot be changed.
Request Type
Select from the following request types:
Launcher
Job
Secret
When the Request Type is Launcher, from the dropdown, select a secret. These are secrets with Requires Approval to Launch Secret enabled. See Creating a secret.
If available, hover over the secret to see additional information including the folder where the secret is located and the secret template being used for the secret.
When the Request Type is Launcher, use the search bar to look up a secret with Requires Approval to Launch Secret enabled.
Job
When the Request Type is Job, secret associated with the job is automatically selected. The option becomes non-editable. This is the secret with Requires Approval to Launch Job enabled.
Not all jobs require approval.
When editing a secret, the Requires Approval to Launch Job option in the Secret Setting pane determines which jobs require approval.
From the dropdown, select a job.
Note: The option is only available when the Request Type is Job.
Request Duration
When the Request Type is Launcher, from the dropdown, select a duration of time or select Custom and then enter a date (MM/DD/YYYY) and time range. Alternatively, select the calendar icon and select a start/end date and time.
When the Request Type is Job, the start time is the time set in the job. Enter an end date (MM/DD/YYYY) and time.
Request Comments
Optionally, enter comments for the request.
Status
Current status of the request.
- Click Submit.
Once the request is submitted, it appears in My Requests and Request Review tab. See My requests and Request review.
Reviewers specified in Approval profile are sent email notifications so that they can log in to FortiPAM from the email link. If the request is approved or denied, the status of the request changes to Approved or Denied respectively in My Requests.
For the approver's email notification, an approver only receives the notification when the request goes to the corresponding tier where the approver is located.