立即与支持人员聊天
与支持团队交流

Identity Manager 8.2.1 - Web Portal User Guide

General tips and getting started Requests
Setting up and configuring request functions Requesting products Saved for Later list Pending requests Displaying request history Canceling requests Renewing products with limit validity periods Unsubscribing products Displaying approvals Undoing approvals
Attestation Compliance Responsibilities
My responsibilities
Managing my departments Managing my application roles Managing my business roles Managing my identities Managing my cost centers Managing my locations Managing my system entitlements Managing my system roles
Delegating tasks Ownerships
Managing data
Managing identities Managing user accounts Managing system entitlements Managing departments Managing locations Managing cost centers Managing business roles Managing system roles
Appendix: Attestation conditions and approval policies from attestation procedures

Analyzing assignments to business roles

You can assign business roles to identities. The business role is then assigned through a request by displaying an assignment analysis for the corresponding membership.

You can see how a business role assignment came about by displaying an assignment analysis for the corresponding membership.

To display the assignment analysis for a membership

  1. In the menu bar click Data administration > Data Explorer.

  2. In the Data Explorer navigation, click Business roles.

  3. On the Business Roles page, next to the business role whose memberships you want to display, click Edit.

  4. In the Edit Business Roles pane, click the Memberships tab.

  5. On the Memberships tab, click Secondary memberships.

  6. Next to the corresponding membership, select the check box.

  7. Click View assignment analysis.

Assigning identities to business roles

You can assign business roles to identities. You do this through requests.

In addition, you can re-add members who were originally assigned through a dynamic role but were excluded by removing the exclusion.

To assign a business role to an identity

  1. In the menu bar click Data administration > Data Explorer.

  2. In the Data Explorer navigation, click Business roles.

  3. On the Business Roles page, next to the business role you want to add an identity to, click Edit.

  4. In the Edit Business Roles pane, click the Memberships tab.

  5. On the Memberships tab, click Secondary memberships.

  6. Click Request memberships.

  7. In the Select Identities pane, select the check box next to the identity you want to assign to the business role.

  8. Click Request memberships.

  9. Close the Edit Business Roles pane.

  10. In the menu bar, click Requests > Shopping cart.

  11. On the Shopping Cart page, click Submit.

    Once the request has been granted approval, the identity is assigned to the business role.

To re-add an excluded member

  1. In the menu bar click Data administration > Data Explorer.

  2. In the Data Explorer navigation, click Business roles.

  3. On the Business Roles page, next to the business role you want to add again, click Edit.

  4. In the Edit Business Role pane, click the Memberships tab.

  5. On the Memberships tab, click Excluded members.

  6. Select the check box in front of the identity you want to add again as a member.

  7. Click Remove exclusion.

Related topics

Removing business roles from identities

You can remove identities from business roles by deleting the corresponding memberships.

To remove a business role from an identity

  1. In the menu bar click Data administration > Data Explorer.

  2. In the Data Explorer navigation, click Business roles.

  3. On the Business Roles page, next to the business role with a membership you want to delete, click Edit.

  4. In the Edit Business Roles pane, click the Memberships tab.

  5. On the Memberships tab, click Secondary Memberships.

  6. Select the check box next to the membership you want to delete.

  7. Click Remove.

  8. In the Remove Memberships pane, click Remove memberships.

  9. (Optional) If the member was assigned through a dynamic role, perform the following actions:

    1. (Optional) In the Specify Reason for Exclusion dialog, specify why you want to remove the member.

    2. Click Exclude members.

Managing business role entitlements

Identities can be assigned entitlements to different objects, such as, groups, accounts, roles, or applications. Assigning identities to business roles avoids you having to assign entitlements separately to each identity. All a business role's entitlements are automatically assigned to all the identities assigned to the business role.

Detailed information about this topic
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级