Glossary › A

A

access role

An access role controls user privileges in applications other than Identity Manager.

add action

An add action occurs when a user is added as a member or administrator of a role. You define the add action when you create or modify the role.

admin policy

An admin policy defines admin rules, scope rules, and administrator privileges for a role. You can define several admin policies for a role. Each policy indicates that if an administrator meets the condition in the admin rule, that administrator has the scope and administrator privileges defined for the policy.

admin role

An admin role enables Identity Manager administrators to manage objects, such as organizations, groups, users, roles, and tasks in an Identity Manager environment.

admin rule

An admin rule defines who is an administrator of a role. You define an admin rule as part of an admin policy for the role.

administrative tools

Administrative tools allow you to configure and use Identity Manager. The tools and samples include configuration files, scripts, utilities, and the jar files that you need to compile custom objects with Identity Manager APIs and API samples. The Administrative tools are in your Identity Manager installation directory.

administrator

An administrator is an Identity Manager user who can use or assign admin roles. User is a general term for any Identity Manager account, which may have admin roles, access roles, or both.

alias

An alias is a unique string that is added to the URL for access to an Identity Manager environment. There are two types of aliases:

• protected alias—Added to the URL for accessing protected tasks in the User Console.

  For example, if the protected alias for an environment is employees, the URL for accessing that environment is:

  http://<myserver.mycompany.org>/iam/im/employees

  where <myserver.mycompany.org> is the fully qualified domain name of the server where Identity Manager is installed.

• public alias—Added to the URL for accessing public tasks, such as self-registration and forgotten password tasks.

  For example, if the public alias is public, the URL for accessing a public task is:

  http://<myserver.mycompany.org>/iam/im/public/index.jsp?task.tag=<tasktag>

  where <tasktag> is the tag for the task to invoke.

  You specify the task tag when you create the task in the Identity Manager User Console.

You specify a protected and public alias when you create an Identity Manager environment in the Identity Manager Management Console.

approval

An approval is an action that must be performed before Identity Manager can complete certain tasks. In a simple approval example, a manager must approve a new title before Identity Manager changes the title in a user's profile. In Identity Manager, an approval is associated with a workflow approval task. In the workflow engine’s user interface, an approval is associated with a workflow activity.