How to Use the %ADMIN_ROLE_CONSTRAINT% Attribute

To use the %ADMIN_ROLE_CONSTRAINT% as the constraint for all admin roles, do the following:

Pair the %ADMIN_ROLE_CONSTRAINT% well-known attribute with a multivalued profile attribute to accommodate multiple roles
When you configure an admin role in the Identity Manager user interface, make sure the constraint is the following:
Admin Roles equals role name

role name

Defines the name of the role for which you are supplying the constraint.

For example, Admin Roles equals User Manager

Note: Admin Roles is the default displayname for the %ADMIN_ROLE_CONSTRAINT% attribute.