Role-Entitlement Associations

This task deletes existing role-entitlement associations then analyzes each role in the system and creates associations between the role and any granted entitlements.

This task only needs to be run one time to establish role associations to entitlements and permissions; once it has been run, IdentityIQ automatically updates the relationship table any time changes are made to role profiles. This task is run by default when upgrading from an earlier version of IdentityIQ to the current version; in an upgrade scenario, you do not need to run the task independently of the upgrade process in order to establish these relationships.

Although there is no requirement to run the Role-Entitlement Associations task again after it is first run, you can choose to run it if you want to – for example, if you have onboarded many applications in a short timeframe and want to take extra care to ensure that your relationship table is up to date.

For more information about the associations between roles and the entitlements and permissions they grant, see Understanding Relationships Between Roles and Entitlements / Permissions.

Option	Description
Enable Partitioning	Enable partitioning of this task across multiple hosts. Partitioning must be configured globally before this option can be used. See Partitioning.
Number of Partitions	Specify a number of partitions. If no number is specified, IdentityIQ calculates an optimal number based on available request servers.

After you complete customizing your task options, click Save for later use, or Save and Execute to save the task and run it immediately.