Role Management

IdentityIQ provides robust role management features that helps customers to implement an enterprise role model, to simplify compliance and provisioning processes for line-of-business users. It helps enterprises align low-level IT privileges with their corporate structure and business operations by grouping individual entitlements into higher-level business functions, and it abstracts business users from the underlying complexity of IT authorization models.

The sections here will help you learn how to build and manage a robust role model in IdentityIQ.

Role Management Concepts – important terms and concepts to help you understand how best to use IdentityIQ’s role management features

Global Configuration and Settings for RolesGlobal Configuration and Settings for Rolesset global configurations and global defaults for roles and role behavior.

Role Modeling – create and maintain the roles that define your enterprise.

Multiple Role and Account Assignment – roles can be assigned to the same identity multiple times, and roles can be applied to multiple accounts on the same application.

Automated Propagation of Role Changes to Role Members – when a role is changed or deleted, that change propagates to all identities that are currently assigned to the role.