Privilege packs
A privilege pack is a set of entitlements
that users request in one step, such as Onboarding Pack. An admin builds
the pack once. A user requests the whole pack, or Trustle offers it to each
new member of a department.
How it works
Section titled “How it works”A pack request creates one access request for each entitlement in the pack. Each request goes through its own approval workflow, the same as a request for that entitlement alone.
- A pack has a Title, an optional Description, and one or more entitlements. Each entitlement in the pack has a connection and a request duration.
- A pack cannot hold the same entitlement two times.
- A pack must hold at least one entitlement before users can request it.
- A pack can have a Department. When a user joins that department, Trustle creates the pack’s requests for the user with the status Pending Acceptance.
- An admin builds the pack, so a pack request includes every entitlement in it. This includes an entitlement or a connection that Trustle hides from the request page.
Before you start
Section titled “Before you start”- You need the Trustle admin role to create, edit, or delete a pack.
- Add the connections and entitlements that the pack needs before you build it. The pack editor picks entitlements from your existing connections.
Configure a privilege pack
Section titled “Configure a privilege pack”Step 1: Open Privilege Packs
Section titled “Step 1: Open Privilege Packs”In the sidebar, under Govern, click Privilege Packs.
Step 2: Start a pack
Section titled “Step 2: Start a pack”Click Create Pack.
Step 3: Name and describe the pack
Section titled “Step 3: Name and describe the pack”- Enter a Title, such as
Onboarding Pack. - Optional: Enter a Description of the access that the pack grants.
- Optional: Select a Department. The help text reads “All users joining this department should be assigned this privilege pack.”
Step 4: Add entitlements
Section titled “Step 4: Add entitlements”- Click Add Entitlement.
- Select a connection, an entitlement, and a duration.
- Repeat for each entitlement that the pack grants.
The entitlements table lists each entitlement that you add. You can edit or remove one at any time.
Step 5: Save the pack
Section titled “Step 5: Save the pack”Click Save Pack.
To change a pack, open it, make your changes, and click Save Pack. To remove a pack, open it and click Delete Pack. Deleting a pack does not remove access that users already got from it.
What users see
Section titled “What users see”To request a pack:
- Click Request Access.
- In the connection selector, select Privilege Pack.
- In Select a pack, select the pack. Pack Contents lists its entitlements.
- Enter a Reason and click Request Access.
A user who joins a department with a pack sees it on My Access, in the Privilege Packs section. The user clicks Accept. Trustle then approves the pack’s requests and provisions the access. No approver acts on an accepted department pack.
How approvals work for a pack request
Section titled “How approvals work for a pack request”All the requests from one pack share one pack request. An approver who opens it approves or denies only the requests that they can approve. An admin can act on the other requests in the same pack.
An approver can approve the whole pack, or exclude some entitlements from the approval. An excluded entitlement needs a comment. Trustle denies the excluded request with that comment. Requests that the approver cannot approve stay pending for their own approvers.