Administrative and business personas

Last update:
Aug 21, 2026
The Aikyam Identity Console enables self-service and delegated administration by establishing two primary user personas: AIC Administrators and Application Advocates. It includes four distinct roles for administrators and two for business advocates.
Each persona is assigned distinct responsibilities and granted specific privileges aligned with their administrative workflows — ensuring secure, efficient, and role-appropriate access management across the organization.
Administrators
AIC Administrators oversee organization-wide identity and access management (IAM), enforce security policies, and manage user provisioning.
Personas
Description
Organization administrator
They can access all organizations and applications within a specific tenant.
  • They have org-wide permissions for application management, user management and policy settings.
Application administrator
An application administrator has management access to all applications within the tenant.
  • Registers applications, manages settings, and oversees SSO integration and user verification.
  • Configures authentication, access settings, and ensures security compliance.
Note: They don't have access to the Organizations and Security tabs.
Application Advocates
Application Advocates manage application and group-level access within their scope, enabling decentralized management without needing deep technical expertise.
Personas
Description
Application owner
  • The app owner will only see and manage their designated application upon logging in.
  • Governs application entitlements, creates and manages user roles, and enforces access policies through application groups.
  • The application owner defines user groups and assigns roles to each group.
  • For the non-migrated applications, when a user is added to a group, they automatically receive all roles assigned to that group.
Group owner
The Groups owner is assigned by the application owner. They are entitled to manage user access within the group by:
  • Adding or removing members from the group.
  • Adding or removing application roles to the group.
  • Adding or removing members from the group.
    They do not have access to view other groups
  • Adding or removing application roles to the group.
  • They do not have access to view other groups.
Note: Based on the policy defined for the group, once a role is assigned to a group, all users within the group will be entitled to that role if the policy is active. If the role is removed, all users in the group will no longer have the said role.
Related information
Aikyam Identity Console overview
Previous: Aikyam Identity Console overview
Next: Get started

On this page

Powered by Aikyam @2025 All rights reserved

Solutions

B2B Solution
B2C Solution
Admin Solution

Developer

Explore
Integrate
Scale

Resources

Documentation

Support

Partner Support
+1 866 451 2735
hsid_support@aikyam.com

Member Support
+1 855 819 5909
optumsupport@optum.com