In CA Identity Manager, the tasks that a user sees in the User Console depend on that user's specific privileges. To display and execute tasks, CA Identity Manager must perform multiple security evaluations, which may have a significant impact on performance when applied over all of the users in a CA Identity Manager environment.
CA Identity Manager performs security evaluations when the following actions occur:
In this case, CA Identity Manager must evaluate a user's roles to determine which tasks that user can access in the User Console.
When a task is invoked, CA Identity Manager must determine which objects that user can manage with that task.
A relationship tab is any tab where a user can view or manage a one-to-many relationship between the task's subject and a set of entitlements. An example of a relationship tab is the Admin Roles tab, which displays the roles that a user has.
For example, CA Identity Manager performs additional security checks when a user adds additional roles to another user on the Admin Roles tab.
Task performance is affected by the following:
|
Copyright © 2014 CA.
All rights reserved.
|
|