Role Management

IdentityIQ provides robust role management features that helps customers to implement an enterprise role model, to simplify compliance and provisioning processes for line-of-business users. It helps enterprises align low-level IT privileges with their corporate structure and business operations by grouping individual entitlements into higher-level business functions, and it abstracts business users from the underlying complexity of IT authorization models.

The sections here will help you learn how to build and manage a robust role model in IdentityIQ.

Role Management Concepts – important terms and concepts to help you understand how best to use IdentityIQ’s role management features

Global Configuration and Settings for Roles – set global configurations and global defaults for roles and role behavior.

Role Modeling – create and maintain the roles that define your enterprise.

Multiple Role and Account Assignment – roles can be assigned to the same identity multiple times, and roles can be applied to multiple accounts on the same application.

Automated Propagation of Role Changes to Role Members – when a role is changed or deleted, that change propagates to all identities that are currently assigned to the role.