This document provides a detailed description of each major feature available in Active Roles 8.0.1 LTS.
The document describes each feature in a separate section containing the following information:
-
Feature name: The name of the feature, indicated in the section title.
-
Description: A detailed description of the feature.
-
Getting started: Information on how to start using the feature. In most cases, this includes references to other Active Roles documents, such as the Administration Guide or the available User Guides, depending on the target users of the feature.
NOTE: Consider the following regarding the Getting started information:
-
Unless indicated otherwise, using the described Active Roles features requires an Active Roles Admin account. By default, an Active Roles Admin is any member of the Administrators local group on the computer running the Active Roles Administration Service.
-
When attempting to use features of the Active Roles Console, make sure that the Console interface is set to "Advanced view mode". To do so, in the View menu, click Mode > Advanced Mode.
Administrative rules and roles
The following sections provide an overview of the Active Roles features related to:
-
Workflow capabilities.
-
Policies (that is, administrative rules).
-
Delegation model (that is, administrative roles).
Identity information can be stored in various data systems, such as directories, databases, or even formatted text files. However, managing and synchronizing such identity information among several different data systems have several challenges:
Active Roles helps you avoid these problems by automating the process of identity data synchronization among various data systems used in your enterprise environment.
increases the efficiency of identity data management by allowing you to automate the creation, deprovisioning, and update operations between the data systems you use. For example, when an employee joins or leaves the organization, the identity information managed by is automatically updated in the managed data systems, reducing administrative workload and getting the new users up and running faster.
also supports scripting capabilities, providing a flexible way to automate administrative tasks and integrate the administration of managed data systems with other business processes. By automating conventional tasks, helps your organization to concentrate on strategic issues, such as planning the directory, increasing enterprise security, and supporting business-critical applications.
For more information on the main features of , see the following sections.
Getting started
For more information on how to install, configure and use , see the Active Roles Administration Guide.
Bidirectional synchronization allows you to synchronize all changes to identity information between your data systems. Using this feature, you can prevent potential identity information conflicts between different data sources.
NOTE: This feature is only supported by certain data systems. For more information, see the relevant data connector documentation in the Active Roles Administration Guide.
