Granting Rights to Identity Manager with Application Roles (4349607)

There are pre-defined application roles that can be assigned to Employees via Manager.

1. In Manager, select "Employees" | "Tasks" | "Assign One Identity Manager Application Roles":

2. Review the Application Roles, and assign the required roles.

For more on Application Roles, please refer to the Authorization and Authentication Guide, Application roles overview.

Additionally, for specific fields that require updates, permissions can be granted at the column level on the relevant table.  For example, Employee account records exist in the "Person" table.  Using Designer, "View", "Edit" and "Insert", or a combination of permissions can be assigned to a specific column, such as 'CentralAccount' in the Person table.

For more information on editing permissions, please see Editing table permissions and column permissions.