To Provision an Admin-Role From Identity Manager Into OpenSSO Enterprise

At this point, the Identity Manager is not yet protected by the policy agent. The role that will be created here will not have any special privileges assigned to it. It will only be used to group the administrative users, and this role will be used later in a policy in OpenSSO Enterprise.

1. Log in to the Identity Manager administrator interface as using the following credentials:

   User Name:

   configurator

   Password:

   configurator

2. Navigate to tab Resources | List Resources.

3. Expand the branch for the Sun Access Manager Realm entry.

4. Mark the checkbox in front of the SunAccessManagerRealm entry.

5. Choose the option Resource Actions | Create Resource Object.

6. In the New Resource Object page, select Role from the dropdown box, and click New.

7. In the next page, enter the name of the role as idm_admins, and assign the user idmadmin to this role.

   Click Save.

8. In the Create Role Results screen, click OK.

   When you expand the SunAccessManagerRealm branch, the Resource List page is displayed and contains a list with the new role idm_admins.

9. Log out of the Identity Manager administrator interface.