Identity Management Service › Getting Started with Identity Management › Integrating Managed Endpoints › Create a Role to Manage the Endpoint

Create a Role to Manage the Endpoint

A Hosting Administrator or an administrator who has the Create Admin Role task can perform this procedure.

Follow these steps:

1. In the User Console, create a role as a copy of the Endpoint-Name Provisioning Manager Role.

   Name the new role: Endpoint-Name Tenant Provisioning Manager Role.

2. Modify the original Endpoint-Name Provisioning Manager Role as follows:
   1. Click the Members tab.
   2. Note that the member policy is set to System Manager. Change the policy to include only users who are members of the CSP Administrator role.
3. Modify the Endpoint-Name Tenant Provisioning Manager role as follows:
   1. Click the Members tab.
   2. Note that the member policy is set to System Manager. Change the policy to include only users who are members of these roles:
      • CSP Administrator
      • MSP Administrator
      • Tenant Administrator
   3. Verify that new role omits the following tasks:
      • Create Account Template
      • Create Endpoint
      • Create Explore And Correlate Definition
      • Delete Account Template
      • Delete Endpoint
      • Delete Explore And Correlate Definition
      • Execute Explore And Correlate
      • Manage Orphan Accounts
      • Manage System Accounts
      • Modify Account Template
      • Modify Endpoint
      • Modify Explore And Correlate Definition
      • View Account Template
      • View Endpoint
      • View Explore And Correlate Definition
   4. Submit the task.