Strategic planning in access management

Defining roles is an essential part of access management. It involves a structured approach to ensure that access measures align with enterprise needs and user responsibilities. It includes identification and classification of user groups based on their access requirements.

To effectively manage access within the target application, follow these steps:

Specify the permissions required for the user to perform different actions within the application.

Develop roles that encapsulate these permissions for various user types.

Establish groups to organize users based on their roles.

Step 4: Assign a group owner

The application owner delegates the duties to the group owner, who is responsible for managing user access by adding or removing members and application roles within the group.

Define and manage settings that include general information about the group, contact support details, user assignments, role assignments, and custom attribute configurations.

For legacy applications, in addition to the above steps 1-5, the business advocate must manually assign roles to individual users (Step 6), as the group-inheritance policy is disabled for them.

(For legacy applications) Step 6: Manually assign roles to the users

For legacy applications, manually assign roles to users as the group-inheritance is disabled. Search for each user, select the correct application and group, and assign the appropriate role.