Access to folders In active directory--automation or workflow "please help"

[wolverine_dcp]

So here is the issue, i receive +- 10-20 calls a day to give access to folders on the network,
sometimes read or full access

Step 1. See what the name of the folder and what access the user is requesting

step 2. Send e-mail to Information owner requesting if user can have access and whether read only or full access

step 3. Give user access via AD "read or full"

Step 4. Send user mappings with company policy attached and SOP "Standard operating procedure" on how to map to

a folder

My question is there any way to maybe automate this??


Maybe user can use the company intranet, choose the folder he wants access to and type of access,
and then a workflow that sends the information owner the request and copies his manager and information security for auditing purpose. :erm:

Then automatically assigns that access based on the approval from the information owners, and then sends new mail with authorisation and mappings to the user.


Ok i know its a mouthful but if you can dream it i am sure it can work just need help asseblief !


Thanks

 

[PsyWulf]

Many moving parts to this,Sharepoint services maybe,Windows File Sharing? Unlikely

 

[wolverine_dcp]

Many moving parts to this,Sharepoint services maybe,Windows File Sharing? Unlikely

Thanks i was thinking sharepoint also, but wanted to run it buy our resident IT experts

 

[The_Unbeliever]

Mine is like -

User requests folder X be opened to user XYZ
I request that the request be emailed to me (so that I have proof of who requested it)
Check on owner, ask for permission
If owner says yes, then I grant permission.

 

[The Abyss]

Sharepoint is the same system we use, great for access request. This i'm sure will help automate the request process. All though the process of adding permissions will still be manual. I'm sure a developer could integrate a form, on request to edit permissions and allow permission at the same time.

Should slow down your phone calls a lot

 

[wolverine_dcp]

Mine is like -

User requests folder X be opened to user XYZ
I request that the request be emailed to me (so that I have proof of who requested it)
Check on owner, ask for permission
If owner says yes, then I grant permission.

That's exactly what I am doing at the moment I am trying to automate as much as possible

 

[wolverine_dcp]

Sharepoint is the same system we use, great for access request. This i'm sure will help automate the request process. All though the process of adding permissions will still be manual. I'm sure a developer could integrate a form, on request to edit permissions and allow permission at the same time.

Should slow down your phone calls a lot

I an looking at sharepoint to kick it off but assigning the access that will be tricky, trying to do it automatically but when and If I get this right I will share

 

[Beachless]

Very possible, your solution will just depend on what you have available.
Setting the AD folder permissions from C# is pretty simple so you could create a wcf service that sets the permissions and then consume that service from sharepoint.
But there will be many ways to skin this cat.