Access roles provide an additional way to provide entitlements in CA IdentityMinder or another application. For example, you can use access roles to accomplish the following:
Access roles are similar to identity policies in that they apply a set of business changes to a user or group of users. However, when you use an access role to apply business changes, you can see which users the changes apply to by viewing the members of the access role.
In most cases, access roles are not associated with tasks.
Note: When CA IdentityMinder integrates with CA SiteMinder, access roles can also provide access to applications that are protected by CA SiteMinder. In this case, access roles do include access tasks. For more information, see the chapter on SiteMinder integration in the Configuration Guide.
This section contains the following topics:
How Access Roles Manage Entitlements
Example: Indirect Profile Attribute Modification
|
Copyright © 2013 CA.
All rights reserved.
|
|