Application Access Management
A real app catalog — requestable, owned, and fulfilled.
Publish applications with owners and access levels, let people request what they need, and fulfill into AD groups, Entra, licenses, or connectors — with auto-grant policies for joiner paths.
Product review
Interactive preview of the Rivitan portal — the same navigation and surfaces operators use, filled with realistic demo data.
Application Access — catalog, owners, access levels, and pending fulfillments with demo Rivitan apps.
What this portal covers
- Application catalog with request volumes
- Owners & operators per app
- Access levels · AD, Entra, license, connector, manual, AWS permission set
- Self-service requests with multi-step stages
- Owner / manager notification & approve/reject
- SoD warnings on toxic combinations
- Fulfillment into real entitlements (live log)
- Auto-grant policies for JML / birthright
- Portal activity trail
The problem
Most “app portals” are link directories. Real access still happens in tickets and tribal knowledge. Nobody can see who owns an application, what levels exist, or prove how access was granted.
What the platform does
- Managed application catalog with owners and operators
- Access levels wired to AD, Entra, licenses, connectors, or manual fulfillment
- Self-service requests with owner notification
- Approve / reject and fulfill into real entitlements
- Auto-grant policies for birthright / JML-style matching
- Portal activity trail plus enterprise audit events
- Dedicated Application Access portal after sign-in
- Access levels can include published AWS permission sets (aws_permission_set)
Who this is for
Organisations that want Lumos/Opal-style application access without bolting on another SaaS console.
See Application Access against your own environment
Book a walkthrough and we will show this capability end to end, then talk about what a pilot would look like for your estate.