General Tab

Use the General tab of the create admin role or edit admin role view to specify the following basic characteristics of the admin role:

• Name. A unique name for this admin role.

  For example, you might create the Finance Admin Role for users who will have administrative capabilities for users in the Finance department (or organization).

• Type. Select either Identity Objects or Service Provider Users for the type. This field is required.

  Select Identity Objects if you are creating an admin role for Identity Manager users (or objects). Select Service Provider Users if you are creating the admin role to grant access to service provider users.

For information about creating an admin role to grant access to service provider users, see Delegated Administration for Service Provider Users in Chapter Chapter 17, Service Provider Administration.

• Assigners. Select or search for users that will be allowed to assign this admin role to other users. The set of users from which you can make selections includes those who have been assigned the Assign Capability right.

  If no users are selected, the only user who will be able to assign the admin role is the one that created it. If the user who created the admin role does not have the Assign User Capabilities capability assigned, then select one or more users as Assigners to ensure that at least one user can assign the admin role to another user.

• Organizations. Select one or more organizations to which this admin role will be available. This field is required.

  The administrator can manage objects in the assigned organization and in any organizations below that organization in the hierarchy.