Functional Capabilities Definitions

Functional capabilities consist of task-based capabilities, as well as other functional capabilities.

• Account Administrator

  • Approver Administrator

    • Organization Approver

    • Resource Approver

    • Role Approver

  • Assign User Capabilities

  • SPML Access

  • User Account Administrator

    • Create User

    • Delete User

      • Delete IDM User

      • Deprovision User

      • Unassign User

      • Unlink User

    • Disable User

    • Enable User

    • Password Administrator

      • Change Password Administrator

      • Reset Password Administrator

    • Rename User

    • Unlock User

    • Update User

    • View User

    • Import User

• Admin Role Administrator

• Auditor Administrator

  • Assign Audit Policies

    • Assign Organization Audit Policies

    • Assign User Audit Policies

  • Audit Policy Administrator

    Auditor View User

  • Auditor Periodic Access Review Administrator

    Auditor Access Scan Administrator

  • Auditor Report Administrator

  • Password Administrator

  • User Account Administrator

  • Assign User Capabilities

• Auditor Report Administrator

  • Access Review Detail Report Administrator

    Run Access Review Detail Report

  • Access Review Summary Report Administrator

    Run Access Review Summary Report

  • Audit Policy Scan Report Administrator

    Run Audit Policy Scan Report

  • Audited Attribute Report Administrator

    Run Audited Attribute Report

  • Audit Policy Violation History Administrator

    Run Audit Policy Violation History Report

  • Organization Violation History Administrator

    Run Organization Violation History Report

  • Policy Summary Report Administrator

  • Resource Violation History Administrator

    Run Resource Violation History Report

  • Run Auditor Report

  • Separation of Duties Report Administrator

    Run Separation of Duties Report

  • User Access Report Administrator

    Run User Access Report

  • Violation Summary Report Administrator

• Auditor View User

  View User

• Bulk Account Administrator

  • Approver Administrator

  • Assign User Capabilities

  • Bulk User Account Administrator

    • Bulk Create User

    • Bulk Delete User

      • Bulk Delete IDM User

      • Bulk Deprovision User

      • Bulk Unassign User

      • Bulk Unlink User

    • Bulk Disable User

    • Bulk Enable User

    • Password Administrator

    • Rename User

    • Unlock User

    • View User

    • Import User

• Bulk Change Account Administrator

  • Approver Administrator

  • Assign User Capabilities

  • Bulk Change User Account Administrator

    • Bulk Disable User

    • Bulk Enable User

    • Bulk Update User

    • Password Administrator

    • Rename User

    • Unlock User

    • View User

• Bulk Resource Administrator

  • Change Active Sync Resource Administrator

  • Control Active Sync Resource Administrator

  • Resource Group Administrator

• Bulk Resource Password Administrator

  • Bulk Change Resource Password Administrator

  • Bulk Reset Resource Password Administrator

• Capability Administrator

• Change Account Administrator

  • Approver Administrator

  • Assign User Capabilities

  • Change User Account Administrator

    • Password Administrator

      • Change Password Administrator

      • Reset Password Administrator

    • Disable User

    • Enable User

    • Rename User

    • Unlock User

    • Update User

    • View User

• Configure Certificates

• Data Warehouse Administrator

• Data Warehouse Query

• Debug

• End User Administrator

• IDM Schema Configuration

• Import/Export Administrator

• License Administrator

• Login Administrator

• Meta View Administrator

• Organization Administrator

• Password Administrator (Verification Required)

  • Change Password Administrator (Verification Required)

  • Reset Password Administrator (Verification Required)

• Policy Administrator

• Product Administrator

• Reconcile Administrator

  Reconcile Request Administrator

• Remedy Integration Administrator

• Report Administrator

  • Admin Report Administrator

    Run Admin Report

  • Audit Report Administrator

    Run Audit Report

  • Auditor Report Administrator

    • Access Review Detail Report Administrator

      Run Access Review Detail Report

    • Access Review Summary Report Administrator

      Run Access Review Summary Report

    • Audit Policy Scan Report Administrator

      Run Audit Policy Scan Report

    • Audited Attribute Report Administrator

      Run Audited Attribute Report

    • AuditLog Report Administrator

      Run AuditLog Report

    • Audit Policy Violation History Administrator

      Run Audit Policy Violation History

    • Organization Violation History Administrator

      Run Organization Violation History

    • Policy Summary Report Administrator

      Run Policy Summary Report

    • Reconcile Report Administrator

      Run Reconcile Report

    • Resource Violation History Administrator

      Run Resource Violation History

    • Run Auditor Report

      • Run Access Review Detail Report

      • Run Access Review Summary Report

      • Run Audit Policy Scan Report

      • Run Audited Attribute Report

      • Run AuditLog Report

      • Run Audit Policy Violation History

      • Run Organization Violation History

      • Run Policy Summary Report

      • Run Resource Violation History

      • Run Separation of Duties Report

      • Run User Access Report

      • Run Violation Summary Report

    • Separation of Duties Report Administrator

      Run Separation of Duties Report

    • User Access Report Administrator

      Run User Access Report

    • Violation Summary Report Administrator

      Run Violation Summary Report

  • Reconcile Report Administrator

    Run Reconcile Report

  • Resource Report Administrator

    Run Resource Report

  • Risk Analysis Administrator

    Run Risk Analysis

  • Role Report Administrator

    Run Role Report

  • Task Report Administrator

    Run Task Report

  • User Report Administrator

    Run User Report

  • Configure Audit

• Resource Administrator

  • Change Active Sync Resource Administrator

  • Control Active Sync Resource Administrator

  • Resource Group Administrator

• Resource Object Administrator

• Resource Password Administrator

  • Change Resource Password Administrator

  • Reset Resource Password Administrator

• Role Administrator

  • Application Administrator

  • Asset Administrator

  • Business Role Administrator

  • IT Role Administrator

• Security Administrator

• Service Provider Administrator

  • Service Provider User Administrator

  • Service Provider Create User

  • Service Provider Delete User

  • Service Provider Update User

  • Service Provider View User

• Service Provider Admin Role Administrator

• Waveset Administrator