You can display application roles that are assigned identities for which you are responsible.
To display an identity's application roles
Open the home page.
On the home page, click Show in the My Direct Reports tile.
On the Identities page, click the identity whose application roles you want to display.
In the Edit Identity pane, click the Application Roles tab.
You can display system entitlements that are assigned identities for which you are responsible.
To display an identity's system entitlements
Open the home page.
On the home page, click Show in the My Direct Reports tile.
On the Identities page, click the identity whose system entitlements you want to display.
In the Edit Identity pane, click the System Entitlements tab.
You can display user accounts that are assigned identities for which you are responsible.
To display an identity's user accounts
Open the home page.
On the home page, click Show in the My Direct Reports tile.
On the Identities page, click the identity whose user accounts you want to display.
In the Edit Identity pane, click the User accounts tab.
You can deactivate identities permanently such as when an employee leaves a company. This may be necessary to strip these identities of their permissions in the connected target system and from their company resources.
Effects of permanent deactivating an identity are:
The identity cannot be assigned to identities as a manager.
The identity cannot be assigned to roles as a supervisor.
The identity cannot be assigned to attestation policies as an owner.
The identity's user accounts are locked or deleted and then removed from group memberships.
To deactivate an identity
Open the home page.
On the home page, click Show in the My Direct Reports tile.
On the Identities page, click the identity you want to deactivate.
In the Edit Identity pane, expand the Organizational information section.
In the Organizational Information section, select the Permanently deactivated check box.
Click Save.
© ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center
