Q&A

Preparations:

On the following dates, each production environment on its scheduled date will migrate to the new Aternity Access Permissions Portal. On that day, your username will lose access to all accounts on that system!!

[Here will have a list of all environments and upgrade dates]

#1: What can I do to make this transition smoother?

Starting today, you can go to the Aternity Access Permissions Portal [link to portal] and fill in your requests. On the very day that system is being upgraded, the Account Administrator (customer) will see those pending requests and approve them. We are working on a a similar announcement email for customers so that they will not be surprised by your requests and will know the requests are coming. Customers also get email notifications when a request is submitted. In existing PoCs, Aternity Tech users will not be revoked.

#2: Will my username be kept for all environments?

Aternity staff will be revoked from all environments (based on the timeline listed above), except for access to MY-DEMO and LMS which will be left untouched. You have to submit a new request via the new system for each tenant you want access to. In existing PoCs, Aternity Tech users will not be revoked.

#3: Will I lose my REST API access too?

Yes. All access permissions to REST API will be revoked too in the same way as the access to Aternity console.

You will be able to run a few API queries using the new permission called REST API for Metadata which will be added to the Aternity Tech and Aternity Read Only roles. This will give you access to logins audit and dashboard views.

#4: What if I have a critical project which I must have access to and cannot wait for customer to come back from a holiday to approve my request?

See P1. If you have a critical project that requires your access, you can ask SaaS Admin to approve your request during the upgrade. Please note that customers will still see your request and SaaS Admin approval; so, make sure to notify the customer about it.

#5: I’m in the middle of a PoC and we have not set up any Account Administrators on that system yet. How will I keep my access?

For PoC accounts, both Aternity Tech and Account Administrator users will be able to approve Aternity users. Once the account moves from evaluation to production, only Account Administrator will be approving Aternity staff requests.

#6: What if my PoC has no Account Administrators but only Aternity Tech, will my access be revoked and who can approve it?

In existing PoCs, Aternity Tech users will not be revoked.

#7: Do the support team need to request access too?

Yes. The support team will need to request access to any production environment too.

In the next version of this solution, we are planning to create a group approval for the support team.

#8: What do I do if I need access to many accounts (do I need to fill in many requests or can I do it in one request)?

In case you need access to multiple accounts, you should submit a request to each account. As requests are sent for approval to different customers, at this point each request should be separated with a specified reason.

#9:What about secure tenants (specific accounts/systems)?

Aternity staff should request access to all accounts and systems, including the dedicated systems like BASF and ZF. Customer will need to approve your access in the same way as in all other regular accounts.

#10: Why would it help Aternity?

Many customers today are worried about who from Aternity can see their data. They cannot see the Aternity staff users that have access today. This feature allows building customers’ trust and helps closing a security gap. By giving our customers the ability to see who have access permissions and granting them the power to approve or revoke those accesses, we are building customer trust and stronger security.

How To?

How it works:

You go to [link to portal] and make an access request for the account you would like to access.

The Account Administrator users on that tenant will get an email notification saying that you have requested an access.

If they approve the access request, you can access the account.

#1: Can a customer reject my access?

Yes, the customer can approve, reject, or revoke access to any Aternity user.

#2: Will I be notified on approval, rejection or any request change?

Yes. Every action will trigger an email notification to you and to the customer Account Administrator according to the request status.

#3: In case my customer has several Account Administrators, are they all going to get notification of the requests?

All Account Administrators of that account will be notified of any request. Once the first administrator who sees the request and approves it, the user will get an access to the account. All other administrators will still be notified about the request status in case of reject.

#4: Can customers log in to the new Access Permissions Portal?

No.Customers cannot access the new access permission portal, but they can see all requests in the Users screen in Aternity console. For customers, the process of creating and providing access permissions to their internal users has not changed.

#5: How will customer Account Administrator know that I requested an access?

Every day for 7 days Account Administrators will be getting an email notification reminder to approve or reject the request. After 7 days, email notifications will stop. All pending requests can be seen and reviewed in the Users screen.

#6: When will my request expire?

Requests can be seen in the Pending status up to 14 days. After that, they will be removed from the Users screen.

#7: How do I create a new request?

We have a WIKI page with all this info too: [Wiki link here]

Once you log in to the Access Permissions Portal, you will see all your requests to access Aternity console.

You will be able to request a new access by clicking on the Request Access button. There are three mandatory fields to fill: Account name, Access request for (until when you need the access for) and Business Justification. *There is an option to unlimited timeframe if you need it.

Once you submit a new request your request will be sent automatically to the customer account administrator for approval.