You assign privileges to users by assigning roles. A role contains tasks that correspond to application functions in CA Identity Manager, such as the Create User task, functions in an application, such a Create Purchase Order function or account templates that give the user accounts, such as an SAP account. When users are assigned a role, they receive the corresponding privileges.
CA Identity Manager provides the following types of roles:
Admin roles can also include any task that appears in the User Console.
If you remove a task or account template from a role, the user can no longer perform that task, use an endpoint account, or use an application function.
Copyright © 2015 CA Technologies.
All rights reserved.