Global Configuration and Settings for Roles

System administrators can set global configurations and global defaults for roles and role behavior. These functions are available through the administrator "gear" menu in IdentityIQ, and are covered in detail in System Setup. Here is a brief overview of the administrator options for roles, and where to find them in the administrator UIs:

On this tab you can enable the use of, and default settings for, sunrise and sunset dates for roles. Sunrise and sunset dates let you make roles and entitlements temporary, to control when a role (or an individual user's access to a role or an entitlement) becomes active, and when it becomes inactive. If you want to use sunrise and sunset dates for roles, you must enable the feature globally here before setting sunrise and sunset dates on specific roles in the Role Management UI.

Use the Edit Role Configuration page to define custom extended role attributes and role types. The extended attributes are displayed with the rest of the role information throughout IdentityIQ. An example of a extended role attribute might be role status. Role type is used to configure roles to perform different functions within your business model. For example, type might be used to control inheritance or automatic assignment of roles.

Here, you can create forms for gathering user input at the time a role is requested.

On this tab, you can select the role types that are available for role requests.