Previous Topic: Role-Based EntitlementsNext Topic: Provisioning Roles


Admin Roles

The admin roles control what a user can do in CA Identity Manager. A system administrator assigns a role to a user; that role defines a set of tasks that the user can perform. Users can perform administrative tasks on user accounts, such as changing a password or updating a job title.

Different users have different levels of access to these tasks. For example, an Employee role could contains tasks that give users the ability to modify their name and address, whereas the Human Resources Manager role contains tasks to modify the user's title and salary.

The following illustration shows four tasks which are combined into one admin role and assigned to three users:

Tasks overview