Home
Role-based access control
Learn about role-based access control.
Creating exceptions to the role membership request approval workflow
In Genetec ClearID™, a role membership request workflow is a series of activities performed by the system or authorized people during the life cycle of a role membership request. To bypass the request workflow for certain types of requesters, you can modify a role's request approval workflow settings.

About ClearID
Learn about the ClearID self-service physical access management solution.
What's new
Check out what's new in the latest update to ClearID.
Deployment preparation
Check your compatibility and deployment requirements.
ClearID plugin
Learn how to download and install the plugin.
Managing identities and users
Learn how to manage identities and users.
Credential synchronization
Managing sites
Learn how to manage sites.
Managing visitors
Learn how to manage visit requests and access requests.
Managing areas
Learn how to manage areas.
Managing visitor watchlists
Learn how to manage visitor access using watchlists.
Role-based access control
Learn about role-based access control.
- About role-based access control
  Role-based access control uses identities with various attributes to automatically manage access control. Defining provisioning policies ensures that people in your organization always have up-to-date access permission levels. If an employee changes job title, department, or moves to a different site, the system automatically adjusts their access when their identity attributes are changed.
- Adding roles
  Before you can configure your role-based automatic access control policies, you must define your roles.
- Creating exceptions to the role membership request approval workflow
  In Genetec ClearID™, a role membership request workflow is a series of activities performed by the system or authorized people during the life cycle of a role membership request. To bypass the request workflow for certain types of requesters, you can modify a role's request approval workflow settings.
- Configuring role managers
  Role managers are composed of two distinct roles: role owners and role managers. Before you can define policies for a role or add or remove identities from a role, you must assign one or more employees as role managers.
- Configuring role-based access control policies
  To ensure that people in your organization always have up-to-date access permission levels, you can define provisioning policies that automatically assign people to specific roles based on their identity attributes. If an employee changes job title, department, or moves to a different site, the system automatically adjusts their access.
- Adding custom provisioning attributes to an identity
  When the default Genetec ClearID™ policy attributes do not meet your needs, you can manually assign custom provisioning attributes to an employees identity record. These attributes can then be used in a role-based access control policy.
- Adding role members
  To add role members who do not fit the default role-based provisioning policy criteria, you must add them manually.
- About role membership request workflow
  A role membership request workflow is a series of activities performed by the system or authorized people during the life cycle of a role membership request. The activities can change the state and properties of role membership requests, affect other entities in the system, or wait for a condition to be met.
- Requesting role membership
  To request role membership for yourself or another identity, you can use the Genetec ClearID™ self-service portal. By using a self-service portal with specified role owners, you can simplify the approval process and avoid delays from routing requests to the wrong approvers.
- Reviewing role membership requests
  To approve or deny a role membership request, a Role manager, a Role owner, or a Supervisor must review the pending approvals.
- About role activity report
  In Genetec ClearID™, a role activity report is an audit trail of all activities related to roles. The report includes timestamp information, activity type, who activity was performed by, and a details section including reason information.
- Viewing a role activity report
  As an Account administrator, Role manager, or Role owner, you can view an audit trail of role-related activities such as timestamp information, activity type, who performed the activity, and more.
Connecting to other systems
Learn how to connect ClearID to other systems.
Visitor management devices
Learn about the ClearID Self-Service Kiosk mobile app that simplifies visitor management and check-in.
Troubleshooting
Troubleshoot common issues that can occur.
Additional resources
Need tech support or product information? Check out these resources.
Glossary

Creating exceptions to the role membership request approval workflow

2025-10-01

In Genetec ClearID™, a role membership request workflow is a series of activities performed by the system or authorized people during the life cycle of a role membership request. To bypass the request workflow for certain types of requesters, you can modify a role's request approval workflow settings.

Before you begin

Define the role's membership request approval workflow.

What you should know

All role membership requests must follow the steps for approval set by the chosen request workflow.
You can create exceptions to this approval process when certain users make role membership requests.
- For example, you can automatically approve requests made by users who belong to a VIP or Upper Management role.
You must be a Role owner, Role manager, or an Account administrator to set exceptions to the request approval workflow for a role.

Procedure

In the Genetec ClearID™ web portal, click Organization > Roles .
Select a role and navigate to General.
Under Request approval workflow settings, define exceptions to the request workflow set for the role:

Note:
If the request approval workflow is set to Automatic approval, the Request approval workflow settings section is hidden.

Supervisor of the identity that required the role

Automatically approve requests when the requester is the Supervisor of the identity that requires the role.

Role manager of the requested role

Automatically approve requests when the requester is the Role manager of the role.

Role owner of the requested role

Automatically approve requests when the requester is the Role owner of the role.

An active member of any selected role

Automatically approve requests when the requester is a member of a listed role.
Click Save.