Access Roles › How Access Roles Manage Entitlements

How Access Roles Manage Entitlements

You can use access roles to manage entitlements by specifying change actions, which occur when a user is added or removed as a member or administrator of a role.

To use access roles, you complete the following steps:

1. An administrator creates an access role.
2. On the Members tab, the administrator specifies add or remove actions, which determine the actions that CA Identity Manager takes when the access role is assigned to a user.
3. The administrator specifies administrator and owner policies, as needed, and submits the task to create the access role.
4. Access role administrators assign the access role to users.
5. CA Identity Manager completes the add actions specified in the role.