Single Sign-On Service › SSO Getting Started Guide › SSO Using Advanced Authentication and Provisioning for a Sensitive Application › Creating Roles to Assign Accounts › Create a Provisioning Role

Create a Provisioning Role

After you create the account template, you decide about the role requirements, as follows:

• The accounts that apply to the role
• Who can assign this role
• Who can modify this role

After you decide about the role requirements, you are ready to create a provisioning role.

Follow these steps:

1. Log in to the User Console and click Roles and Tasks, Provisioning Roles, Create Provisioning Role.
2. Complete the Profile tab.

   Only the Name field is required unless you are using a customized version of Create Provisioning Role.

3. Complete the Account Templates tab.
   1. Click an endpoint type, such as SAP.
   2. Click an account template.

      The templates that you can click are based on the endpoint type you selected.

   3. Add more account templates if needed for different endpoint types.
4. Complete the Administrators tab and Owners tab.

   Add admin rules that control who manages members and administrators of this role.

   Add owner rules that control who can modify this role.

5. Click Submit.

   A message appears to indicate the status of the Create Provisioning Role task.

6. To verify that the role was created, click Roles and Tasks, Provisioning Roles, View Provisioning Role.

You have now successfully created a provisioning role. The role can now be assigned to users, so that they can access the accounts that they need.

More information:

User-defined Custom Attributes for Roles