User levels in Entitlement Aggregation
Due to API limitations, the Identity Security Cloud Governance connector aggregates user levels in entitlement aggregation, and these levels are predefined within the connector. However, during account aggregation, the connector retrieves all the user levels assigned to the account.
Following is the list of user levels included in entitlement aggregation:
|
ID |
Name |
Description |
|---|---|---|
|
HELPDESK |
Helpdesk |
Helpdesk access to Identity Security Cloud |
|
ORG_ADMIN |
Admin |
Full administrative access to Identity Security Cloud |
|
CERT_ADMIN |
Cert Admin |
Cert Administrator access to Identity Security Cloud |
|
REPORT_ADMIN |
Report Admin |
Report Administrator access to Identity Security Cloud |
|
ROLE_ADMIN |
Role Admin |
Role Administrator access to Identity Security Cloud |
|
ROLE_SUBADMIN |
Role Sub-admin |
Role SubAdministrator access to Identity Security Cloud |
|
SOURCE_ADMIN |
Source Admin |
Source Administrator access to Identity Security Cloud |
|
SOURCE_SUBADMIN |
Source Sub-admin |
Source Subadministrator access to Identity Security Cloud |
|
CLOUD_GOV_ADMIN |
Cloud Gov Admin |
Cloud Gov Admin access to Identity Security Cloud |
|
CLOUD_GOV_USER |
Cloud Gov User |
Cloud Gov User access to Identity Security Cloud |
|
sp:aic-dashboard-read |
Access Intelligence Center - Reader |
Access Intelligence Center - Reader access to Identity Security Cloud |
|
sp:aic-dashboard-write |
Access Intelligence Center - Author |
Access Intelligence Center - Author access to Identity Security Cloud |
|
sp:aic-dashboard-admin |
Access Intelligence Center - Admin |
Access Intelligence Center - Admin access to Identity Security Cloud |
|
sp:ui-config-hub-admin |
Configuration Hub Admin |
Admin access to Configuration Hub |
|
sp:ui-config-hub-backup-admin |
Configuration Hub Backup Admin |
Backup Admin access to Configuration Hub |
|
sp:ui-config-hub-read |
Configuration Hub Reader |
Reader access to Configuration Hub |
|
SAAS_MANAGEMENT_ADMIN |
SaaS Management - Admin |
Admin access to SaaS Management |
|
SAAS_MANAGEMENT_READER |
SaaS Management - Reader |
Reader access to SaaS Management |
|
das:ui-administrator |
Data Access Security Administrator |
Administrator access to Data Access Security |
|
das:ui-compliance_manager |
Data Access Security Compliance Manager |
Compliance Manager access to Data Access Security |
|
das:ui-data_owner |
Data Access Data Owner |
Data Owner access to Data Access Security |
|
das:ui-auditor |
Data Access Security Auditor |
Auditor access to Data Access Security |
|
idn:access-request-administrator |
Access request administration |
Access request administration access on IdentityNow |
|
idn:access-request-administrator-read |
Access Request Administration Read Only |
Access Request Administration Read Only access to IdentityNow |