Skip to content
Support processInternal ITISO 27001GDPRCross-industryApproval
PROCESS TEMPLATE

User administration

From the request through authorisation to the provisioned access.

5 steps3 lanes1 decision points2 systemsMaturity managedBPMN 2.0
Excerpt of the process diagram. The remaining steps appear after unlocking. ' + ' DEPARTMENT IT OPERATIONS INFORMATION SECURITY Define the role and scope of permissions Obtain the additional approval Assign the standard role 2 more steps

Tell the AI what runs differently at your company and get the adapted process back in seconds. The download gives you BPMN 2.0 XML, ready to import into any BPMS.

METRICS

How to tell whether the process works

Share of access rights matching the role matrix, target 100 percent.

THE PROCESS

5 steps, 3 lanes

1
Define the role and scope of permissions

Department

2
Obtain the additional approval

Information security

3
Assign the standard role

IT operations

Continue with your business address

The full diagram, the process record and the files are reserved for business addresses.

  • The complete diagram
  • All 5 steps in full
  • Goal, scope and trigger
  • Inputs and outputs per step
  • Every metric with its target
  • Risks, opportunities and business rules
  • Standards and legal basis
  • The BPMN file, ready to import

We use the address solely to protect the download. Any address lets you open and adapt the template in Procevia.

CONTEXT

When this template fits

Who it is for

For any company with more than one business application. As soon as access is granted by word of mouth, permissions accumulate that nobody ever removes, and recertification becomes a major project.

Where it typically stalls

At authorisation. IT sets up what the department asks for without recording who owns the permission on the business side. The audit then lacks the evidence. The template makes business authorisation its own step before provisioning.

What it connects to

Upstream is onboarding with the first access need. At the other end sits offboarding, which closes the same accounts again.

Relation to standards

Granting, changing and revoking access rights with traceable authorisation is a recurring audit point. The template models the authorisation path.

THE BIGGER PICTURE

Part of these process maps

A single process says little about where it sits in the company. These maps show it among its neighbours.

COMMON QUESTIONS

What people ask first

Can the template be imported into another tool?

Yes. The file is BPMN 2.0 XML and imports into any BPMS that supports the standard.

May I hand the template out in training sessions?

Yes. All templates are published under CC BY 4.0, so you may print, share and teach with them as long as you credit Procevia as the source.

CATEGORISED AS