CU Identity Manager FAQ

Please see the how-to guides below or the more detailed user guides on the CU Identity Manager page.

• How to request access for yourself
• How to request access for others

• First start with your manager/sponsor to determine what applications or resources you need access to.
• Once you know what applications you need access to, work with your Campus Access Coordinator for your campus and the application in question. They will help you determine what roles you should request for the given resource.

You can check on the status of your request:

• Log into CU Identity Manager.
• Click on the Pending Requests tile on the Home page.
• Click on the Request ID of the request
• For the status of the request:
  • In the Summary Information at the top of the request is a field called status:
    • If the status is Failed, click on the word failed for a reason.
    • If the status is Obtaining Operation Approval, then the request is waiting for an approver to approve the request.
    • If the status is Completed, the role was provisioned.
• To see who the request is assigned to for approval:
  • Click on the Approval Details tab above the name of the target user.
  • The Assignee column will tell you who its assigned to. This should be the name of the manager or will list the campus access/security coordinator. All requests should be also assigned to "IDM Approvers" for administrative purpose.
  • If the assignee column says Access Management, the request has been approved and is waiting for manual action from the Access Management team.
  • If the assignee column says "SYSTEM ADMINISTRATOR" or "IDM Approvers" ONLY (with no manager or security coordinator listed) then something may have gone wrong with your request. Contact access@cu.edu.
  • Click on the Title (the row with the assignee listed) and the page will show the workflow history of the request and any comments that have been added by approvers.

CU Identity Manager gets is manager information from the HCM system. There are a few possibilities:

• The HCM system does not reflect your correct/new manager assignment:
  • The HCM system needs to get updated by your department and contact your Campus Access Coordinator for help getting your request re-assigned to the correct manager.
• You have multiple jobs
  • If you have multiple active jobs, the workflow will default to the manager of your primary job.
  • If you need the approval to go to a manager of a non-primary job please contact access@cu.edu to request reassignment of the approval task. Please include the Request Id and the non-primary job for which the access is requested.
• You are requesting access for a new job that starts in the future:
  • You will need to wait for you start date in most cases to request the new access.
• The HCM system and CU Identity Manager are out of sync:
  • Contact your Campus Access Coordinator for help getting your request re-assigned to the correct manager.

• Please see the How to approve a request how-to guide or the more detailed user guides on the CU Identity Manager page.

• Please see the How to approve a request how-to guide or the more detailed user guides on the CU Identity Manager page.

You will need to request department access in addition to your functional roles. In the Make Request page (Catalog), search for the category of
department level access that you need:
Request only ONE of the following:
CU Dept Access - All Anschutz
CU Dept Access - All Denver
CU Dept Access - All Boulder
CU Dept Access - All Springs
CU Dept Access - All CU
CU Dept Access - Custom
CU Dept Access - Dept Change (if you previously had custom access and need new custom access)

Request the appropriate Dept Access role in CU Identity Manager and in the shopping cart enter the specific department ID or
information in the Justification box in the upper right corner of the screen. All Campuses access requires an additional approval by the
System Administration HCM Access Coordinator.

You should ONLY request Inquiry access if you will not have any other roles. All users who have any other functional roles will automatically receive inquiry access.

You should ONLY request Inquiry access if you will not have any other roles. All users who have any other functional roles will automatically receive inquiry access.

You should ONLY request Inquiry access if you will not have any other roles. All users who have any other functional roles will automatically receive inquiry access.

All employees and certain POIs automatically have a CU Careers account created. Users do not request CU Careers access, instead roles and permissions are granted automatically based on your status and access in the HCM system.

CU Careers department access is granted to match your department access in the HCM system. If you have a need for access for different departments in CU Careers than in HCM contact Employee Services. If your access in HCM is what you need, but you are not seeing department users in CU Careers, contact access@cu.edu and provide details.

The only two HCM roles that you should reassign to Access Management are CU Dept Access - Custom and CU Dept Access - Dept Change. All other role requests can just be approved.