Understanding Identity Manager Administration

Identity Manager administrators are users with extended Identity Manager privileges.

Identity Manager administrators manage:

• User accounts

• System objects, such as roles and resources

• Organizations

Unlike users, administrators in Identity Manager are assigned capabilities and controlled organizations, which are defined as follows:

• Capabilities. A set of permissions granting access rights to Identity Manager users, organizations, roles, and resources.

• Controlled organizations. Once assigned to control an organization, the administrator can manage the objects in that organization, as well as any organizations that are descended from it in the hierarchy.