Identity Management Service › Getting Started with Identity Management › Integrating Managed Endpoints › Copy and Modify the Role

Copy and Modify the Role

Follow these steps:

1. Create a role as a copy of the imported role.
2. Name the new role: Endpoint-Name Tenant Provisioning Manager Role.
3. Modify the original Endpoint-Name Provisioning Manager Role as follows:
   1. Click the Members tab.

      Note that the member policy is set to System Manager.

   2. Change the policy to include only users who are members of the CSP Administrator role.
4. Modify the Endpoint-Name Tenant Provisioning Manager role as follows:
   1. Click the Members tab.

      Note that the member policy is set to System Manager.

   2. Change the policy to include only users who are members of these roles:

      CSP Administrator

      MSP Administrator

      Tenant Administrator

   3. Verify that new role omits the following tasks:

      Create Account Template

      Create Endpoint

      Create Explore And Correlate Definition

      Delete Account Template

      Delete Endpoint

      Delete Explore And Correlate Definition

      Execute Explore And Correlate

      Manage Orphan Accounts

      Manage System Accounts

      Modify Account Template

      Modify Endpoint

      Modify Explore And Correlate Definition

      View Account Template

      View Endpoint

      View Explore And Correlate Definition

5. Submit the task.