You can edit a non-protected capability.
In the Administrator interface, click Security in the top menu.
Click Capabilities in the secondary menu.
The Capabilities page opens and shows a list of Identity Manager capabilities.
Right-click the capability in the list, and then select Edit. The Edit Capability page opens.
Make your changes and click Save.
You cannot edit built-in capabilities. You can, however, save them with a different name in order to create your own capability. You can also use built-in capabilities in capabilities that you create.