In the Administrator interface, click Security in the top menu.
Click Capabilities in the secondary menu.
The Capabilities page opens and shows a list of Identity Manager capabilities.
The Create Capability page opens.
Complete the form as follows:
Name the new capability.
In the Capabilities section, use the arrow buttons to move the capabilities that should be assigned to users into the Assigned Capabilities box.
In the Assigners box, select one or more users that will be allowed to assign this capability to other users.
If no users are selected, the only user who can assign this capability is the one that created the capability.
If the user who created the capability does not have the Assign User Capability capability assigned, then you must select one or more users to ensure that at least one user can assign the capability to another user.
In the Organizations box, select one or more organizations to which this capability will be available.
The set of users from which you can make assigner selections are those who have been assigned the Assign Capability right.