Implementation Guide › Optimizing CA IdentityMinder › Task Optimizations › Task Scope Evaluation and Performance

Task Scope Evaluation and Performance

When an administrator uses an admin task that involves searching for a managed object, such as a user, group, organization, task, or role, CA IdentityMinder evaluates and applies task scope rules. These rules can significantly impact the amount of time CA IdentityMinder takes to display the list of objects to select for the task.

Note: Unlike member, admin, and owner policy evaluations, information about scope rule evaluations is not stored in a cache.

Task scope is determined by the following:

• The type of object that the task manages.
• Scope rules that apply to the admin role that includes the task. Scope rules are defined in member, owner, and admin policies.
• Any user-defined search criteria.

For example, consider a Modify User task, which is included in the User Manager role. The User Manager role has a member policy with a scope rule that allows User Managers to manage users in the Employees organization. An administrator opens the Modify User task and enters the search criteria: Last Name starts with A. In this case, the scope for the Modify User task is all users in the Employees organization whose last name starts with A.