Each resource object that EmpowerID protects has a View One page associated with it. For Management Roles, this page is the “View One Management Role Page.” This page contains tabs and accordions that provide information about a specific Management Role and gives administrators and other authorized users the ability to manage the role in EmpowerID. The below image shows what a typical View One Management Role Page looks like to a user with admin access to the role.
...
Component | Purpose | ||||||||
---|---|---|---|---|---|---|---|---|---|
General Card | Displays general information about the group, such as the group type and the account store
role. | ||||||||
People as Members of Management Role Accordion | Displays role members, as well as provides access to edit role membership as needed | ||||||||
Actions Accordion | Displays a list of workflow tiles that can be used to perform common actions against the Management Role, such as cloning or deleting it. | ||||||||
Editable Multivalued Fields Accordion | Displays miscellaneous information about the role, such as the search tags linked to it. | ||||||||
Additional Information Accordion | Provides access to additional information about the role, such as “Who Has Access to this Management Role”, etc. |
...
Component | Purpose |
---|---|
General Card | Displays general information about the Management Role, such as whether it is published in the IAM Shop, its parent Management Role Definition, and the Access Request Policy used to control access requests to the role. |
Advanced Card | Displays more advanced information about the Management Role, such as the Management Role GUID and risk score for the role. |
Extension Attributes 1-10 Card | Displays extension attributes 1-10 stored in the database for the Management Role, if any. |
Extension Attributes 11-20 Card | Displays extension attributes 11-20 stored in the database for the Management Role, if any. |
Members Tab | Contains several accordions with categorized role membership information. |
Access Granted Tab | Displays current access by category for the Management Role |
Risks Tab | Displays risk-related information for the Management Role, such as any local functions granted to the role |
Policies Tab | Displays policy-related information for the Management Role, such as any inherited resource entitlements granted to the role |
Eligibility Tab | Displays eligibility-related information for the Management Role, such as “Resources Members Eligible to Request (As Resources)” |
Macrosuite divider macro | ||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...
Component | Purpose |
---|---|
Membership Dashboard | Displays quick view of the number of members in the Management Role, including JIT versus permanent members |
Functional Access Card | Displays any local functions the Management Role has, and the risk level associated with those functions |
People as Members of Management Role Accordion | Displays role members, as well as provides access to manage role membership as needed |
Pre-Approved Just-in-Time Members Accordion | Displays assignees who are pre-approved for role membership. Pre-approved assignees are automatically granted membership when requesting it from the IT IAM Shop. Authorized users can add and remove pre-approved assignees to and from the role via this accordion. |
Direct Mapped Local Functions Accordion | Displays all local functions mapped directly to the Management Role and gives authorized users the ability to manage the functions mapped to the role |
Function Access Report Accordion | Displays information about any functions the Management Role has access to, including direct and indirect function access |
Violations Accordion | Displays violations of organizational risk policies for the Management Role, if any |
Rules Accordion | Displays Risk rules associated with the Management Role, if any |
Recertification Items Accordion | Displays recertification items for the Management Role, if any |
Actions Accordion | Displays a list of workflow tiles that can be used to perform common actions against the Management Role, such as cloning the Management Role |
...