在 Azure AD 权利管理中请求访问某个访问包Request access to an access package in Azure AD entitlement management

借助 Azure AD 权利管理,访问包可实现资源和策略的一次性设置,从而在访问包的生命周期内自动管理访问权限。With Azure AD entitlement management, an access package enables a one-time setup of resources and policies that automatically administers access for the life of the access package.

访问包管理器可以配置策略,以要求用户获得访问访问包的批准。An access package manager can configure policies to require approval for users to have access to access packages. 需要访问访问包的用户可以提交请求来获得访问权限。A user that needs access to an access package can submit a request to get access. 本文介绍如何提交访问请求。This article describes how to submit an access request.

登录到“我的访问权限”门户Sign in to the My Access portal

第一步是登录到“我的访问权限”门户,然后即可在其中请求访问某个访问包。The first step is to sign in to the My Access portal where you can request access to an access package.

必备角色: 请求者Prerequisite role: Requestor

  1. 查找与你合作的项目经理或业务经理发出的电子邮件或消息。Look for an email or a message from the project or business manager you are working with. 该电子邮件应该包含需访问的访问包的链接。The email should include a link to the access package you will need access to. 该链接以 myaccess 开头,包含一个目录提示,并以访问包 ID 结尾。The link starts with myaccess, includes a directory hint, and ends with an access package ID.

    https://myaccess.microsoft.com/@<directory_hint>#/access-packages/<access_package_id>

  2. 打开链接。Open the link.

  3. 登录到“我的访问权限”门户。Sign in to the My Access portal.

    请确保使用组织(工作或学校)帐户。Be sure you use your organizational (work or school) account. 如果不确定,请咨询项目或业务经理。If you're unsure, check with your project or business manager.

请求访问包Request an access package

在“我的访问权限”门户中找到访问包以后,即可提交请求。Once you have found the access package in the My Access portal, you can submit a request.

必备角色: 请求者Prerequisite role: Requestor

  1. 在列表中查找访问包。Find the access package in the list. 如有必要,可以键入搜索字符串,然后选择“名称”、“目录” 或“资源” 筛选器进行搜索。If necessary, you can search by typing a search string and then selecting the Name, Catalog, or Resources filter.

    “我的访问权限”门户 - 资源搜索

  2. 单击复选标记,选中该访问包。Click the checkmark to select the access package.

  3. 单击“请求访问”打开“请求访问”面板。 Click Request access to open the Request access pane.

    我的访问权限门户 - 访问包

  4. 如果显示“业务理由”框,请键入需要访问的理由。If the Business justification box is displayed, type a justification for needing access.

  5. 如果“请求在特定的时间段访问”已启用,请选择“是”或“否”。If Request for specific period? is enabled, select Yes or No.

  6. 必要时指定开始日期和结束日期。If necessary, specify the start date and end date.

    我的访问权限门户 - 请求访问

  7. 完成后,单击“提交”以提交请求。When finished, click Submit to submit your request.

  8. 单击“请求历史记录”,查看请求和状态的列表。Click Request history to see a list of your requests and the status.

    如果访问包需要审批,则请求现在为等待审批状态。If the access package requires approval, the request is now in a pending approval state.

选择策略Select a policy

如果你请求访问某个访问包,而该包有多个可以应用的策略,系统可能会要求你选择一个策略。If you request access to an access package that has multiple policies that apply, you might be asked to select a policy. 例如,访问包管理员可能会为两组内部员工配置一个使用两个策略的访问包。For example, an access package manager might configure an access package with two policies for two groups of internal employees. 第一个策略可能允许访问 60 天,但需要批准。The first policy might allow access for 60 days and require approval. 第二个策略可能允许访问 2 天,但不需要批准。The second policy might allow access for 2 days and not require approval. 如果遇到这种情况,则必须选择要使用的策略。If you encounter this scenario, you must select the policy you want to use.

“我的访问权限”门户 - 请求访问 - 多个策略

填写请求者信息Fill out requestor information

在系统授予你对访问包的访问权限之前,你可能会请求访问需要业务理由和其他请求者信息的访问包。You may request access to an access package that requires business justification and additional requestor information before granting you access to the access package. 填写访问该访问包所需的所有请求者信息。Fill out all the requestor information required to access the access package.

“我的访问权限”门户 - 请求访问 - 填写请求者信息

重新提交请求Resubmit a request

当你请求访问访问包时,你的请求可能会被拒绝;如果审批者未及时响应时,请求也可能会过期。When you request access to an access package, your request might be denied or your request might expire if approvers don't respond in time. 如果需要访问权限,可以重试并重新提交请求。If you need access, you can try again and resubmit your request. 以下过程说明如何重新提交访问请求:The following procedure explains how to resubmit an access request:

必备角色: 请求者Prerequisite role: Requestor

  1. 登录到“我的访问权限”门户。Sign in to the My Access portal.

  2. 单击左侧导航菜单中的“请求历史记录”。Click Request history from the navigation menu to the left.

  3. 查找要为其重新提交请求的访问包。Find the access package for which you are resubmitting a request.

  4. 单击复选标记,选中该访问包。Click the check mark to select the access package.

  5. 单击所选访问包右侧的蓝色“查看”链接。Click the blue View link to the right of the selected access package.

    选择访问包和“查看”链接

    右侧将打开一个窗格,其中显示访问包的请求历史记录。A pane will open to the right with the request history for the access package.

    选择“重新提交”按钮

  6. 单击页面底部的“重新提交”按钮。Click the Resubmit button at the bottom of the pane.

取消请求Cancel a request

如果在提交访问请求后请求仍为“待审批”状态,可以取消请求。If you submit an access request and the request is still in the pending approval state, you can cancel the request.

必备角色: 请求者Prerequisite role: Requestor

  1. 在“我的访问权限”门户左侧,单击“请求历史记录”,查看请求和状态的列表。In the My Access portal, on the left, click Request history to see a list of your requests and the status.

  2. 单击要取消的请求的“查看”链接。Click the View link for the request you want to cancel.

  3. 如果请求仍为“待审批”状态,则可单击“取消请求”,将请求取消。If the request is still in the pending approval state, you can click Cancel request to cancel the request.

    “我的访问权限”门户 - 取消请求

  4. 单击“请求历史记录”,确认请求已取消。Click Request history to confirm the request was canceled.

后续步骤Next steps