Identity Manager 9.2.1 - Web Designer Web Portal User Guide

To open a system role's overview page go to Responsibilities > My Responsibilities > System Roles and click a system role.

On the system role's overview page, you can perform various actions on the system role you selected beforehand.

To do this, click on one of the tiles:

Table 339: Tiles
Tile	Description
Overview	Opens the Overview - System role page (see Overview – System role (page description)). Here you can see all the relevant information about departments summarized in an overview. (see Displaying my system roles' overviews). For more information, click on the links inside one of the shapes.
Main data	Opens the Main data - System role page (see Main data – System role (page description)). Here you can see and edit the system role's main data (see Displaying and editing my system roles' main data).
Memberships	Opens the Memberships - System role page (see Memberships – System role (page description)). You select the following actions: Display identities that are assigned this system role (see Displaying memberships in my system roles) Request the system role for identities (see Assigning identities to my system roles) Cancel this system role for identities (see Removing identities from my system roles)
Permissions	Opens the Entitlements – System role page (see Entitlements – System role (page description)). You select the following actions: Display entitlements assigned to the system role (see Displaying my system roles' entitlements) Add new entitlements to the system role (see Adding my system roles' entitlements) Delete system role entitlements (see Deleting my system roles' entitlements)
Compliance	Opens the Compliance – System role page (see Compliance – System role (page description)). Here you can see rule violations that were caused by this system role (see Displaying my system roles' rule violations).
Attestation	Opens the Attestation – System role page (see Attestation – System role (page description)). You select the following actions: Display all attestation cases linked to this system role (see Displaying my system roles' attestation cases) Display details of the objects being attested (see Displaying my system roles' attestation cases) Make approval decisions about pending attestation cases (see Approving and denying my system roles' attestation cases) Display attestors of pending attestation cases (see Displaying attestors of my system roles' pending attestation cases) Send reminders to approvers (see Sending reminders about my system roles' pending attestation cases)
Risk	Opens the Risk – System role page (see Risk – System role (page description)). Here you can see the system role's risk index (see Displaying my system roles' risk indexes). For more information about risk assessment, see the Risk assessment.
History	Opens the History – System role page (see History – System role (page description)). Here you can see all the changes made to the system role (see My system roles' history).
Usage	Opens the Usage – System role page (see Usage – System role (page description)). Here you can see which roles and organizations belong to members of the system role (see Displaying role memberships of my system roles' members).
Compliance reports	Opens the Compliance report – System role page (see Compliance reports – system role (page description)). You select the following actions: Display the system role's policy violations (see Displaying my system roles' policy violations) Display rule violations of identities that the system role is assigned to (see Displaying rule violations of my system roles' members) Display risk indexes and entitlements of identities that the system role is assigned to (see Displaying risk indexes and entitlements of my system roles' members)

Overview – System role (page description)

Main data – System role (page description)

To open the Main data – System role page go to Responsibilities > My Responsibilities > System Roles > select system role > Main data.

On the Main data - System role page, you can show and edit the system role's main data (see Displaying and editing my system roles' main data).

The following tables give you an overview of the different functions and content on the Main data – System role page.

Table 340: Controls
Control	Description
Save	Use this button to save the changes to the main data.

You can change the following main data.

Table 341: System role main data
Property	Description
System role	Enter a full, descriptive name for the system role.
Display name	Enter a name for displaying the system role in the One Identity Manager tools.
Internal product name	Enter a company internal name for the system role.
System role type	Select the role type of the system role. The system role type specifies which type of company resources make up the system role.
Service item	Click Create a new service item and create a new service item (a product). If a service item is already assigned, click Change and select a service item. You cannot use a system role until a service item has been assigned to it.
System role manager	Click Change and select the identity responsible for the system role. This identity can edit the system role's main data and be used as an attestor for system role properties. If the system role can be requested in the IT Shop, the manager will automatically be a member of the application role for product owners assigned the service item.
Comment	Enter a comment for the system role.
IT shop	Select the check box if the system role can also be requested through the IT Shop. This system role can be requested by identities through the Web Portal and allocated by defined approval processes. The system role can still be assigned directly to identities and hierarchical roles. For more information about IT Shop, see the One Identity Manager IT Shop Administration Guide.
Only use in IT Shop	Select the check box if the system role can only be requested through the IT Shop. This system role can be requested by identities through the Web Portal and allocated by defined approval processes. The system role may not be assigned directly to hierarchical roles.

Entitlements – System role (page description)

To open the Entitlements – System role page go to Responsibilities > My Responsibilities > System Roles > select system role > Entitlements.

On the Entitlements – System role page, you can:

Display entitlements assigned to the system role (see Displaying my system roles' entitlements)
Add new entitlements to the system role (see Adding my system roles' entitlements)
Delete system role entitlements (see Deleting my system roles' entitlements)

The following tables give you an overview of the different functions and content on the Entitlements – System role page.

Table 342: Controls
Control	Description
New	Use this button to add a new entitlement to the system role (see Adding my system roles' entitlements). Identities that this system role is assigned to, automatically obtain membership in the object assigned here.
Remove	Use this button to delete selected entitlements (see Deleting my system roles' entitlements). To do this, select the check box in front of the entitlement you want to delete and click the button.

Table 343: Columns
Column	Description
Entitlement	Shows the entitlement's name.
Origin	Shows how the entitlement was assigned. For example, the entitlement might have been assigned through a dynamic role.
Entitlement type	Shows the entitlement type (for example, report subscriptions, account definition, resources).

TIP: You can show less data by using the column filters. For more information, see Filtering.

请选择您的产品：

为向您提供更好的服务，请填写'Purpose of your Chat'（联系目的）：

针对您的问题建议的解决方案

Identity Manager 9.2.1 - Web Designer Web Portal User Guide

System role overview page (page description)

Overview – System role (page description)

Main data – System role (page description)

Entitlements – System role (page description)