Implementation Guide › Optimizing Identity Manager › Task Optimizations

Task Optimizations

In Identity Manager, the tasks that a user sees in the User Console depend on that user's specific privileges. To display and execute tasks, Identity Manager must perform multiple security evaluations, which may have a significant impact on performance when applied over all of the users in an Identity Manager environment.

Identity Manager performs security evaluations when the following actions occur:

• A user logs into the User Console

  In this case, Identity Manager must evaluate a user's roles to determine which tasks that user can access in the User Console.

• A user invokes a task

  When a task is invoked, Identity Manager must determine which objects that user can manage with that task.

• A user accesses a relationship tab

  A relationship tab is any tab where a user can view or manage a one-to-many relationship between the task's subject and a set of entitlements. An example of a relationship tab is the Admin Roles tab, which displays the roles that a user has.

• A user adds objects on a relationship tab

  For example, Identity Manager performs additional security checks when a user adds additional roles to another user on the Admin Roles tab.

Task performance is affected by the following:

• Task scope, which determines where an administrator can use a task
• Relationship tabs, which display an object's relationship to other objects

More information:

Task Scope Evaluation and Performance

How Identity Manager Renders Relationship Tabs

Relationship Tabs and Performance

Guidelines for Optimizing Tasks