Administration Guide › Users › Assign Roles to a User › Assign Roles with the Modify User Task

Assign Roles with the Modify User Task

Use the Admin Roles, Provisioning Roles, or Access Roles tab of the Modify User task to assign additional admin, provisioning, or access roles to a single user.

Note: You can also use these tabs in the Create User task.

To modify a user

1. Log into the User Console as a user with user management privileges.

   The default User Manager role gives users the appropriate privileges.

2. Select Users, Manage Users, Modify User.

   The Modify User task opens.

3. Select one of the following tabs, as needed:
   • Admin Roles
   • Provisioning Roles
   • Access Roles

   CA Identity Manager displays the selected tab.

4. Click on of the following buttons:
   • Add a role-type role

     role-type represents admin, provisioning or access roles.

     When you click this button, CA Identity Manager opens a search screen where you can search for and select roles to add. CA Identity Manager displays the list of roles that you can manage. For a role to appear in the list, you must be an administrator of the role, and the role must have one or more of the following options selected, as needed:

     Administrators can add and remove members of this role

     Administrators can add and remove administrators of this role

   • Copy from a user

     When you select this button, CA Identity Manager opens a search screen where you can search for and select a user that has the roles the current user needs.

5. Click Submit.

   CA Identity Manager adds the user as a member or administrator of the specified roles.