Identity Manager 8.0 - Web Portal User Guide

Restoring Deleted Roles

Another function for managing roles is restoring deleted roles. An example of a deleted role could be roles that have been sorted out during merging.

This function is also available in the views of managed organizations. Restoring a deleted role is described in the following step-by-step on the basis of a business role.

To restore deleted roles

1. Perform one of the following tasks.
   1. Open the Business Roles menu and click Restore a deleted role.

      - OR -

   2. Restore the child role by selecting a business role from the Business Roles menu and clicking Restore.

   This opens a dialog box. The view Select deleted role is enabled and lists all the deleted objects.

   NOTE: You can set a date in order to limit your search for deleted roles.

2. Select the desired role and click Next.

   Multi-select is possible. The view Verify appears and lists the actions that will be run on restore.

3. You can deselect individual actions if you do not want to run them all. Click Next.
4. Close the dialog box.

System Roles

You will find target system administrator responsibilities under the Governance Administration menu.

• Add a new owner role and assign a product owner to an Active Directory group if you are target system administrator. You can also edit the requestability of a Active Directory group.
• Change the properties of the entitlement. For more information, see Master Data.

To open the "System Roles" menu

• Open the menu Responsibilities | Governance Administration and click System Roles.

Detailed information about this topic

• Assigning Product Owners
• Assigning Attestors

Assigning Product Owners

You can assign a new product owner to an Active Directory group in the Governance Administration menu.

To assign a new product owner

1. Open the menu System Entitlements and select an Active Directory group.

   NOTE: Before you can assign a new product owner, you must add a new owner role for this employee.

2. Select the Owners view and click New.
3. Enter a name for the new owner role and a reason for creating it.

   NOTE: After adding the new owner role, assign a product owner to it.

4. Select a product owner using Assign and the new owner role with Product owners.

   NOTE: If the entry Without owner in AD was selected in the Product owner dialog box, you cannot select a product owner.

Assigning Attestors

You can assign a new attestor to an Active Directory group in the Governance Administration menu.

To assign an attestator

1. Open the menu System Entitlements and select an Active Directory group.

   NOTE: Before you can assign a new attestor, you must add a new application role.

2. Select the Attestors view and click New.
3. Enter a name for the new application role and a reason for creating it.

   NOTE: After adding the new application role, assign an attestor to it.

4. Select the new application role over Assign and the new application role with Attestor.