Home
Role-based access control
Learn about role-based access control.
Creating exceptions to the role membership request approval workflow
To bypass standard approval processes and auto-approve specific requesters such as VIPs, you can create exceptions to the role membership request approval workflow in Genetec ClearID™.

About ClearID
Learn about the ClearID self-service physical access management solution.
What's new
Check out what's new in the latest update to ClearID.
Deployment preparation
Check your compatibility and deployment requirements.
Account configuration
Learn how to configure and customize the ClearID portal.
ClearID plugin
Learn how to download and install the plugin.
Managing identities and users
Learn how to manage identities and users.
Credential synchronization
Managing sites
Learn how to manage sites.
Managing visitors
Learn how to manage visit requests and access requests.
Managing areas
Learn how to manage areas.
Managing visitor watchlists
Learn how to manage visitor access using watchlists.
Role-based access control
Learn about role-based access control.
- About role-based access control
  Genetec ClearID™ role-based access control is an automated security framework that assigns specific roles to identities. By dynamically provisioning access to physical spaces based on user attributes, role-based access control ensures the right people have the right access at the right time, minimizing security risks and administrative overhead.
- Adding roles
  To configure role-based access control policies and group people with the same access rights, Account administrators must first add roles in Genetec ClearID™.
- Creating exceptions to the role membership request approval workflow
  To bypass standard approval processes and auto-approve specific requesters such as VIPs, you can create exceptions to the role membership request approval workflow in Genetec ClearID™.
- Configuring role managers
  To define policies or manage role members, Role owners must first configure Role managers in Genetec ClearID™.
- Configuring role-based access control policies
  To automate role assignments based on identity attributes and ensure access dynamically updates when an employee changes departments or locations, Account administrators and Role owners can configure role-based access control policies in Genetec ClearID™.
- Adding custom provisioning attributes to an identity
  To supplement default records and enforce specialized role-based access control policies, Account administrators can manually assign custom provisioning attributes to an identity in Genetec ClearID™.
- Adding role members
  To grant access to employees who do not meet automated provisioning policy criteria, Role managers can manually add role members in Genetec ClearID™.
- About role membership request workflow
  The Genetec ClearID™ role membership request workflow is an automated framework that manages the lifecycle of a request. By automating approvals and system state changes, this workflow reduces administrative overhead and allows reviewers to focus on critical tasks.
- Requesting role membership
  To simplify the approval process and request access for yourself or your team members, Employees, Managers, and Supervisors can request role membership using the Genetec ClearID™ self-service portal.
- Reviewing role membership requests
  To approve or deny pending access for employees, a Role manager, Role owner, and Supervisor can review role membership requests in Genetec ClearID™.
- Checking the status of role requests
  To ensure the organization remains security-compliant and audit-ready, Account administrators, Role managers, and Role owners can check the status of role requests in Genetec ClearID™.
- About role activity report
  In Genetec ClearID™, a role activity report is an audit trail of all activities related to roles. Each entry includes a timestamp, the type of activity performed, the user who initiated the action, and additional details such as the reason for the change.
- Viewing a role activity report
  To view a complete audit trail of system changes and monitor role-related activities, Account administrators, Role managers, and Role owners can view a role activity report in Genetec ClearID™.
Connecting to other systems
Learn how to connect ClearID to other systems.
Visitor management devices
Learn about the ClearID Self-Service Kiosk mobile app that simplifies visitor management and check-in.
Troubleshooting
Troubleshoot common issues that can occur.
Additional resources
Need tech support or product information? Check out these resources.
Glossary

Creating exceptions to the role membership request approval workflow

2026-05-06

To bypass standard approval processes and auto-approve specific requesters such as VIPs, you can create exceptions to the role membership request approval workflow in Genetec ClearID™.

What you should know

All role membership requests must follow the steps for approval set by the chosen request workflow.
You can create exceptions to this approval process when certain users make role membership requests.
- For example, you can automatically approve requests made by users who belong to a VIP or Upper Management role.
You must be a Role owner, Role manager, or an Account administrator to set exceptions to the request approval workflow for a role.

Procedure

In the Genetec ClearID™ web portal, click Organization > Roles .
Select a role and navigate to General.
Under Request approval workflow settings, define exceptions to the request workflow set for the role:
If the request approval workflow is set to Automatic approval, the Request approval workflow settings section is hidden.

Supervisor of the identity that required the role

Automatically approve requests when the requester is the Supervisor of the identity that requires the role.

Role manager of the requested role

Automatically approve requests when the requester is the Role manager of the role.

Role owner of the requested role

Automatically approve requests when the requester is the Role owner of the role.

An active member of any selected role

Automatically approve requests when the requester is a member of a listed role.
Click Save.