แก้ไข

แชร์ผ่าน


Share link to request an access package in entitlement management

Most users in your directory can sign in to the My Access portal and automatically see a list of access packages they are in scope of a policy and can request. In addition, users from outside of your directory that are in scope, can also see access packages they are in scope of a policy and can request. However, if you have sensitive access packages or external business partner users that aren't yet in your directory but aren't part of an existing connected organization, those access packages should be hidden. Even though the user can request a hidden access package, they won't see it in the My access portal if they don't have the link. Instead, you need to send them a link that they can use to request that access package.

For the external user from another directory to use the My Access portal link to request the access package, the catalog for the access package must be enabled for external users and there must be a policy for the external user's directory in the access package.

Tip

Steps in this article might vary slightly based on the portal you start from.

  1. Sign in to the Microsoft Entra admin center as at least an Identity Governance Administrator.

    Tip

    Other least privilege roles that can complete this task include the Catalog owner and the Access package manager.

  2. Browse to Identity governance > Entitlement management > Access package.

  3. On the Access packages page, open the access package you want to share a link to request an access package for.

  4. On the Overview page, check the Hidden setting. If the Hidden setting is Yes, then even users who don't have the My Access portal link can browse and request the access package. If you don't wish to have them browse for the access package, then change the setting to No.

  5. On the Overview page, copy the My Access portal link.

    Access package overview - My Access portal link

    It's important that you copy the entire My Access portal link when sending it to an internal business partner. This ensures that the partner gets access to your directory's portal to make their request. The link starts with myaccess, includes a directory hint, and ends with an access package ID. For US Government, the domain in the My Access portal link will be myaccess.microsoft.us.

    https://myaccess.microsoft.com/@<directory_hint>#/access-packages/<access_package_id>

  6. Email or send the link to your external business partner. They can share the link with their users in their organization to request the access package.

Next steps