Previous Topic: Troubleshooting the Mobile AppNext Topic: How Access Roles Manage Entitlements

Access Roles

Access roles provide an additional way to provide entitlements in CA Identity Manager or another application. For example, you can use access roles to accomplish the following:

Access roles are similar to identity policies in that they apply a set of business changes to a user or group of users. However, when you use an access role to apply business changes, you can see which users the changes apply to by viewing the members of the access role.

In most cases, access roles are not associated with tasks.

Note: When CA Identity Manager integrates with CA SiteMinder, access roles can also provide access to applications that are protected by CA SiteMinder. In this case, access roles do include access tasks. For more information, see the chapter on SiteMinder integration in the Configuration Guide.

This section contains the following topics:

How Access Roles Manage Entitlements

Example: Indirect Profile Attribute Modification

Create an Access Role