To Assign Roles and Role Exclusions

Roles can be assigned to Business Roles and IT Roles using the Roles tab of the Create Role form. Assigned roles should be added to the Contained Roles table.

• Roles cannot be assigned to Application roles and Asset roles.

• Business roles cannot be assigned to any role type.

Role exclusions can be assigned to all four role types using the Roles tab of the Create Role form. If a role with a role exclusion is assigned to a user, the excluded role cannot also be assigned to the user. Role exclusions should be added to the Role Exclusions table.

This procedure describes how to assign one or more roles to a role when completing the Create Role form. See To Create Roles Using the Create Role Form to get started.

To complete the Roles tab

1. Click the Roles tab in the Create Role page.

2. Click Add in the Contained Roles section.

   The tab refreshes and displays the Find Roles to Contain form.

3. Search for the role (or roles) that you will be assigning to this role. Start first with any required roles. (You will add conditional and optional roles later.)

   See To Search for Roles for help using the search form. Business Roles cannot be nested or assigned to other role-types.

4. Use the checkboxes to select one or more roles to be assigned, then click Add.

   The tab refreshes and displays the Add Contained Role form.

5. Select Required (or Conditional or Optional, as appropriate) from the Association Type drop-down menu.

   Click OK.

6. Repeat the previous four steps to add conditional roles (if required). Repeat the previous four steps again to add optional roles (if required).

7. Click Save to save the role, or click the Identity, Resources, or Security tabs to continue with the role creation process.

   Figure 5–6 shows the Create Role form’s Roles tab. For help using this form, see online help.

   Figure 5–6 The Roles Portion of the Create Role Tabbed Form