Creating a Role Assignment Management provision

Use the Role Assignment Management provision to assign new roles to users.

To create a Role Assignment Management provision:

  1. Select Manage > Provisions on the navigation bar and click New to select Access Management. The Access Management page is displayed.
    Note: Alternately, you can also click the arrow option to review the violations generated by a provision and perform an action, if required. See, Reviewing details of a provision.
  2. Specify this information:
    Insight
    The name of the Insight for which the provision is created.
    Primary Object
    The primary object analyzed in this provision.
    Note: You can select User or Role as the primary object.
    Type
    The type of the Access Management provision created. Select Role Assignment Management.
    Data Source
    The Data source linked to the selected Insight.
    User
    The name of the user who are assigned the roles.
    Manager
    The manager of the user.
    Note: This field is enabled based on the setting specified in the Redirect Provision section Configuration > Access Management Insights > Approval Options > Allow user to redirect provision .
    Assignment Type
    The assignment to be selected for the provision. Possible values:
    • Assign Roles: To assign new roles to the selected user.
    • Assign Roles as Another User: To assign roles of an existing user to the selected user.
      Note: You must select the user whose roles must be assigned in the Assign Roles as Another User field.
    • Assign Job Position: To assign an existing Job Position wherein roles are assigned to the selected user. The Job Positions displayed are based on the selected data source.
      Note:  You must select the Hierarchy Definition, the Functional Area values, and the associated scoping definition for the selected Functional Area, in the respective fields.
  3. Click the Roles Assigned to User section. Specify the information. See, Roles Assigned to User.
    Note: The section is displayed only when you select Assign Roles or Assign Roles as Another User option in the Assignment Type field.
  4. Click the Writeback Schedule section to select one of these options:
    • Schedule Now: Select this option to perform the application writeback after the completion of the approval process.
    • Schedule Later: Select this option to schedule the application writeback at a future date and time or the approval date and time, which ever is later. Click Add.
      Note:  The Schedule Later option is displayed only if the Completion of Provision in the corresponding Approval Process Template is set to Automatic.
  5. Click the Other Details section. Specify the information. See Other Details.
  6. Click Save to save the provision. The provision is displayed on the Provisions page.