The following table summarizes the permissions available to the supported three levels of administrators using which you create a custom role.
The column name acronyms that are used in the table are as follows:
Note: The 
sign indicates the actions (or permissions) that are available to the specified level of administrator.
|
Permission |
GA |
OA |
UA |
|---|---|---|---|
|
Organization Management Permissions See Managing Organizations for more information about the tasks related to these permissions. |
|||
|
Create Organization |
|
|
|
|
Update Organization |
|
|
|
|
Update Organization Status |
|
|
|
|
List Organizations |
|
|
|
|
Retrieve Default Organization |
|
|
|
|
Delete Organization |
|
|
|
|
Account Type Management Permissions See Configuring the Account Type for more information about the tasks related to these permissions. |
|||
|
Create Account Type |
|
|
|
|
Update Account Type |
|
|
|
|
Delete Account Type |
|
|
|
|
Administrator Management Permissions See Managing Administrators for more information about the tasks related to these permissions. |
|||
|
Create Administrator |
|
|
|
|
Update Administrator |
|
|
|
|
Delete Administrator |
|
|
|
|
User Management Permissions See Managing Users and Credentials for more information about the tasks related to these permissions. |
|||
|
Create User |
|
|
|
|
Update User |
|
|
|
|
Update User Status |
|
|
|
|
List Users |
|
|
|
|
List Users for Account |
|
|
|
|
Get User Status |
|
|
|
|
Set User Custom Attributes |
|
|
|
|
Search Users |
|
|
|
|
Get PAM |
|
|
|
|
Set PAM |
|
|
|
|
Delete User |
|
|
|
|
User Account Management Permissions See Managing Users and Credentials for more information about the tasks related to these permissions. |
|||
|
Create User Account |
|
|
|
|
Update User Account |
|
|
|
|
List User Accounts |
|
|
|
|
Retrieve User Account |
|
|
|
|
Delete User Account |
|
|
|
|
Cache Management Permissions See Refresh the Cache for more information about the tasks related to these permissions. |
|||
|
Refresh System Cache |
|
|
|
|
Refresh Organization Cache |
|
|
|
|
View Global Cache Refresh Requests |
|
|
|
|
View Organizational Cache Refresh Requests |
|
|
|
|
Email and Telephone Type Permissions See Configuring Email and Telephone Types for more information about the tasks related to these permissions. |
|||
|
Add Email/Telephone Types |
|
|
|
|
Update Email/Telephone Types |
|
|
|
|
List Email Types |
|
|
|
|
List Telephone Types |
|
|
|
|
Basic Authentication Permissions See Specifying Basic Authentication Settings for more information about the tasks related to these permissions. |
|||
|
Update Global Basic Authentication Policy |
|
|
|
|
Update Organizational Basic Authentication Policy |
|
|
|
|
Encryption Permissions See Configuring Attribute Encryption for more information about the tasks related to these permissions. |
|||
|
Configure the Encryption Set Selected at the Organization Level |
|
|
|
|
List Configured Attributes for Encryption |
|
|
|
|
Credential Management Permissions See Updating User Credential Information for more information about the tasks related to these permissions. |
|||
|
Add Element to ArcotID keybag |
|
|
|
|
Create Credential |
|
|
|
|
Delete ArcotID Attribute |
|
|
|
|
Delete Credential |
|
|
|
|
Delete Elements From ArcotID Key |
|
|
|
|
Disable Credential |
|
|
|
|
Download Credential |
|
|
|
|
Enable Credential |
|
|
|
|
Fetch Credential |
|
|
|
|
Get ArcotID |
|
|
|
|
Get Element from ArcotID Keybag |
|
|
|
|
Get Questions and Answers |
|
|
|
|
Reissue Credential |
|
|
|
|
Reset Credential |
|
|
|
|
Reset Credential Custom Attribute |
|
|
|
|
Reset Credential Validity |
|
|
|
|
Set ArcotID Attribute |
|
|
|
|
View Credential Details |
|
|
|
|
Configuration Permissions See Managing Global CA AuthMinder Configurations for more information about the tasks related to these permissions. |
|||
|
Assign Configurations as Default |
|
|
|
|
Assign Configurations |
|
|
|
|
Check key label in HSM |
|
|
|
|
Configure Plug-In |
|
|
|
|
Create ArcotID Policy |
|
|
|
|
Create ArcotOTP-EMV OTP Policy |
|
|
|
|
Create ArcotOTP-OATH Policy |
|
|
|
|
Create OATH OTP Token Policy |
|
|
|
|
Create OTP Policy |
|
|
|
|
Create QnA Policy |
|
|
|
|
Create Password Policy |
|
|
|
|
Credential Key Management |
|
|
|
|
Credential Type Resolution Configuration |
|
|
|
|
Fetch Credential Configuration |
|
|
|
|
Manage ASSP Configuration |
|
|
|
|
Manage ArcotID Profile |
|
|
|
|
Manage ArcotOTP Profile |
|
|
|
|
Manage ArcotOTP-EMV Profile |
|
|
|
|
Manage OATH OTP Profile |
|
|
|
|
Manage OTP Profile |
|
|
|
|
Manage QnA Profile |
|
|
|
|
Manage RADIUS Configuration |
|
|
|
|
Manage RADIUS Proxy |
|
|
|
|
Manage SAML Token Configuration |
|
|
|
|
Manage Password Profile |
|
|
|
|
Module Association |
|
|
|
|
OATH Token Management |
|
|
|
|
Other Permissions |
|||
|
Get QnA Attributes |
|
|
|
|
Get QnA Values |
|
|
|
|
List Arcot Attributes |
|
|
|
|
List Repository Attributes |
|
|
|
|
Perform QnA Verification |
|
|
|
|
Bulk Upload |
|
|
|
|
View Bulk Upload Requests |
|
|
|
|
Report Permissions See Managing Reports for more information about the tasks related to these permissions. |
|||
|
View My Activity Report |
|
|
|
|
View User Activity Report |
|
|
|
|
View User Creation Report |
|
|
|
|
View Organization Report |
|
|
|
|
View Administrator Activity Report |
|
|
|
|
View Authentication Report |
|
|
|
|
View Credential Report |
|
|
|
|
View Configuration Management Report |
|
|
|
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|