How to Create or Edit a Profile

A profile is a set of entitlements on a specific application. An entitlement is either a specific value for an account attribute, most commonly group membership, or a permission.Profiles are specific to one role.

IdentityIQ also supports the creation of roles based on the mining of entitlements within the enterprise. These roles typically model the IT privileges required to perform a specific function within an application or other target system. Using a configurable algorithm, IdentityIQ searches for access patterns to determine logical groupings of entitlements. For information about creating a profile using entitlement analysis, see How to Create a Profile Using Entitlement Analysis.

Use one of the following procedures to create a new profile:

Note: Click Simple View if you are in the advance view. The Simple View might not be available in all roles.

  1. Click Add in the Entitlements Panel.

  2. Select the application on which to apply this profile from the Application suggestion list.
    Enter the first few letters of an application name and select the application from the suggest list.

  3. Select an account attribute and then an entitlement from the dropdown lists.

  4. Click Save to return to the Role Editor.

  1. Click Advanced View in the Entitlements Panel.

  2. Click Create in the Profiles panel of the Role Editor and select New Profile. Profiles can only be added within a role. See How to Create or Edit a Profile.

  3. Enter a description for the profile.

  4. Select the application on which to apply this profile from the Application suggestion list. Enter the first few letters of an application name and select the application from the suggest list.

  5. Add Attribute Rules and Permissions to the profile. To use the filter, see How to Create or Edit a Profile. For an explanation of the permission options, see How to Create or Edit a Profile.

  6. Click Save to return to the Role Editor.

  1. Access the Entitlement panel from the Role Editor page.

  2. Edit the entitlement information.

Additional Information

From the Role Editor you can add additional profiles, edit the role, or save the role. See Role Editor Page.