Creating a Role Assignment Management provision
Use the Role Assignment Management provision to assign new roles to users.
To create a Role Assignment Management provision:
-
Select Manage > Provisions on the navigation bar and click New to select Access Management. The Access
Management page is displayed.
Note: Alternately, you can also click the arrow option to review the violations generated by a provision and perform an action, if required. See, Reviewing details of a provision.
-
Specify this information:
- Insight
- The name of the Insight for which the provision is created.
- Primary Object
- The primary object analyzed in this provision. Note: You can select User or Role as the primary object.
- Type
- The type of the Access Management provision created. Select Role Assignment Management.
- Data Source
- The Data source linked to the selected Insight.
- User
- The name of the user who are assigned the roles.
- Manager
- The manager of the user. Note: This field is enabled based on the setting specified in the Redirect Provision section Configuration > Access Management Insights > Approval Options > Allow user to redirect provision .
- Assignment Type
- The assignment to be selected for the provision. Possible values:
- Assign Roles: To assign new roles to the selected user.
- Assign Roles as Another
User: To assign roles of an existing user to the
selected user.Note: You must select the user whose roles must be assigned in the Assign Roles as Another User field.
- Assign Job Position: To
assign an existing Job Position wherein roles are assigned to the
selected user. The Job Positions displayed are based on the selected
data source.Note: You must select the Hierarchy Definition, the Functional Area values, and the associated scoping definition for the selected Functional Area, in the respective fields.
-
Click the Roles Assigned to User section. Specify the information. See, Roles Assigned to
User.
Note: The section is displayed only when you select Assign Roles or Assign Roles as Another User option in the Assignment Type field.
-
Click the Writeback Schedule section to select one of these options:
- Schedule Now: Select this option to perform the application writeback after the completion of the approval process.
- Schedule Later:
Select this option to schedule the application writeback at a future date and
time or the approval date and time, which ever is later. Click
Add. Note: The Schedule Later option is displayed only if the Completion of Provision in the corresponding Approval Process Template is set to Automatic.
- Click the Other Details section. Specify the information. See Other Details.
- Click Save to save the provision. The provision is displayed on the Provisions page.