n In EmpowerID, access to resources is granted through the assignment of Access Levels. Access Levels consist of one or more "EmpowerID Operations" and/or "native system rights," which are specific to a particular resource type. By assigning Assigning an Access Level to an EmpowerID actor , you enable enables the actor to execute the associated operations and rights on the specified resources. This article provides a step-by-step guide on how to assign these.
...
ACT-Computer-Object Administration – Grants assignees the ability to edit and delete the target computer
ACT-Computer-Object-Create – Grants assignees the ability to create computer objects
ACT-Computer-Shared-Credential-Approver – Grants assignees the ability to approve PSM login requests for the target computer
ACT-Computer-Shared-Credential-Assigner – Grants assignees the ability to assign and unassign shared credentials to and from the target computer
ACT-Computer-Shared-Credential-Login – Grants assignees the ability to use a shared credential to initiate a privileged session to the target computer
Access Manager – The Acces Access Manager is the owner of the resource and can manage and approve permissions assignments for the target computer
All Access (EmpowerID Admin) – Grants assignees the ability to execute any operation against the target computer
Local computer Administrator – Adds assignees to the local administrator's group for the computer to control access
...