Eligibility rules allow you to restrict who can and cannot see and shop for IT resources that you have enabled for the IAM Shop. Users added as eligible assignees for specific resources can shop for those objects in the IAM Shop.
...
IAM Shop Assignees is an optional feature that you can implement to give eligible users the ability to request specific permissions, known as “IAM Shop Permission Levels,” to computers in the IAM Shop. For computers, out-of-the-box options include Local Admin and Domain Admin; however, you can create your own as needed. When users are added as IAM Shop Assignees for the computer, they can select the permission level(s) when requesting access.
| Info |
|---|
If you wish to display to users additional options beyond the out-of-the-box IAM Shop Permission Levels, you can do so by creating your own and linking them to the computer resource type. For information, see Creating IAM Shop Permission Levels. |
From the View One page for the computer, click the RBAC subtab and expand IAM Shop Assignees for Requesting Access.
Click the Add New
button.
Under General, select the IAM Shop Permission Level you want to assign.
Under Assignee Granting the Permission Level, do the following:
Select the assignee type from the Which Type of Assignee For This Policy dropdown.
Select the appropriate assignee from the Select <Assignee> To Receive Policy dropdown.
Click Save.
Repeat to add other assignees as needed.
Click Submit to complete the process.
...