Implementation Guide › Managing Identities and Access › Admin Roles for User Account Management › Profile Management at the Attribute Level

Profile Management at the Attribute Level

You can create admin roles for different administrators who need to read or write different profile attributes. For example, a company may have several employees who perform operations on user profiles, each accessing different attributes. The following figure shows three roles and their associated tasks. Each role has different access to profile attributes.

In this example, three roles can manage different attributes for the same user, Dan Walton:

• A Help Desk administrator views user names and addresses and resets user passwords.
• A Human Resources administrator modifies user IDs, user names, addresses, titles, and number of vacation days.
• An IT manager modifies the title of users and views their name and number of vacation days.

Whatever roles you have when you log in to CA IdentityMinder, a series of tabs, called categories, appear based on the admin role assigned to your CA IdentityMinder account. You click a tab to see the tasks that you can perform in that category as shown in the following figure:

The categories and the tasks in those categories that a user sees are determined by the user's admin roles.