Administration Guide › Role Planning › Delegated Administration › Delegation Steps

Delegation Steps

After you decide about your use of roles based on Purpose of Roles, delegated administration occurs as follows:

1. An administrator creates the role with rules for who is a role owner, administrator, or member.
2. A role owner modifies the role, when changes are needed.
3. A role administrator:
   • Assigns more role administrators (optional).
   • Assigns more role members (optional).

   Some users are already role administrators or members by meeting rules defined in the role.

4. A role member uses the role:
   • An admin role member manages users and other objects in the Identity Manager environment.
   • An access role member performs functions in business applications.
   • A provisioning role member uses the accounts defined by policies in the role.