Page Comparison

EmpowerID employs Management Roles to control access to Resource Admin, a microservice for managing various resources (such as applications, groups, and shared folders). These Management Roles ensure users can access only the parts of the Resource Admin microservice that are relevant to their responsibilities.

Resource Admin Management Roles are divided categorized into two types:

UI-* Management Roles

...

– Provide access to the

...

application’s user interface (UI) components,

...

including pages

...

, controls,

...

workflows, and reports.
VIS-Res-Admin-MS-API Management Role

...

– Grants access to

...

the

...

APIs used by the Resource Admin microservice.

...

Important: A user must be granted both the relevant UI-* role(s) and the VIS-Res-Admin-MS-API role to use all aspects of the microservice. Additionally, they must have any required activity (ACT-<Resource>-*) and visibility (VIS-<Resource>-*) roles applicable to the persona they use in Resource Admin. For example, if a user needs to manage shared folders, they will require the corresponding ACT and VIS Management Roles for those folders.

Viewing Assigned Management Roles

...

EmpowerID allows you to view all Management Roles the Resource Admin microservice uses. Follow these steps:

In the navbar of the EmpowerID Web app, go to Apps and Authentication > Applications.
On the Applications tab, search for Resource Admin Microservice App and click the Display Name link for the app.
Image Added
This opens the View One page for the microservice, allowing you to view and manage relevant objects in EmpowerID.
Image Added
Select the App Resources tab and expand the Management Roles Used By This Application section.
You will see a list of all Management Roles associated with the Resource Admin microservice.
Image Added

To manage resources in Resource Admin, users need to have one or more of the below following Management Role assignments (based on the needed their required scope).

Table 1: Resource Admin Management Roles

Management Role

Role Type

Description

UI-Res-Admin-MS-Application

Feature Set (Ui)

Provides access to the Resource Admin UI for managing applications. The role specifically grants access to the following user interface controls, pages and reports, and workflows:

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-third-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab3\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-fourth-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab4\" type=\"button\" role=\"tab\">Workflows</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>ResourceAdmin ApplicationDetails AppManagementRole Description</li>\r\n <li>ManageAzureAppWizard Workflow SingleAction PublishinITShop\r\n</li>\r\n <li>ResourceAdmin ApplicationDetails RoleDefintions Description\r\n</li>\r\n <li>ResourceAdmin ApplicationDetails Members UIActionsButton Control\r\n</li>\r\n <li>ResourceAdmin-Application-Details-RoleDefinations-People-Control\r\n</li>\r\n <li>ResourceAdmin-BulkDeleteApplicationAppRightAssignments-Control\r\n</li>\r\n<li>ResourceAdmin-Applications-AddAzureApplicationRoleButton-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AllowsTimeConstrainedAccess</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitionUIActionButton Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole RoleDefintions Description</li>\r\n<li>Application Roles Application Filter Resource Admin</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole Type</li>\r\n<li>ResourceAdmin-ApplicationFilters-AdvanceSearch-FriendlyName</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole MaxAccessDuration</li>\r\n<li>ManageAzureAppWizard Workflow SingleAction Edit</li>\r\n<li>ResourceAdmin Applications Details TokenConfigurations</li>\r\n<li>ResourceAdmin-AddApplicationAppRightAssignments-Control</li>\r\n<li>ResourceAdmin Application Details IAMShopAssignments</li>\r\n<li>ManageAzureAppWizard Workflow MultiAction PublishinITShop</li>\r\n<li>ResourceAdmin Application Details ClientSecrets</li>\r\n<li>ResourceAdmin Application List ResourceSystem</li>\r\n<li>ResourceAdmin-Application-Details-PbacDefinitions-AppRights</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole DeleteAppRight Control</li>\r\n<li>ResourceAdmin ApplicationDetails Members DisplayName</li>\r\n<li>ResourceAdmin-ApplicationAppRightAssignmentsTab-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AccessGranted SelectAppManagementRole Control</li>\r\n<li>ResourceAdmin ApplicationDetails Eligibility AssigneeType</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole RoleDefintions SystemType</li>\r\n<li>ResourceAdmin-SelectApplicationAppRightAssignments-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole Overview Owners Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AccessRequestPolicy</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitions People AssignRoleDefinition Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole Type</li>\r\n<li>ResourceAdmin Application Details Role Definition Details Eligiblity</li>\r\n<li>ResourceAdmin Application Details APIPermissions</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole TechnicalName</li>\r\n<li>ManageAzureAppWizard Workflow SingleAction Delete</li>\r\n<li>ResourceAdmin ApplicationDetails Eligibility ResourceType</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefintions Role</li>\r\n<li>ResourceAdmin ApplicationDetails Members RemoveMultipleMembers Control</li>\r\n<li>ResourceAdmin-Application-Details AppManagementRoles AccessGranted Control</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefintions Description</li>\r\n<li>ResourceAdmin-Application-Details-AppRights-Assignments-Control</li>\r\n<li>ResourceAdmin-ApplicationDetails-AppRoleDefinition-AppRights-Description</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole IsHighSecurity</li>\r\n<li>ResourceAdmin ApplicationDetails SensitiveFunctions RiskLevel</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AccessGranted AssigneeTechnicalName</li>\r\n<li>Application Roles Business Functions Filter Resource Admin</li>\r\n<li>ResourceAdmin-Application-Details-PbacDefinitions-PbacResourceTypes</li>\r\n<li>ResourceAdmin ApplicationDetails Members Enabled</li>\r\n<li>ResourceAdmin_OwnedApplications_Control</li>\r\n<li>ResourceAdmin-ConfigureEligibilityApplicationAppRight-Control</li>\r\n<li>ResourceAdmin ApplicationDetails Eligibility EligibilityType</li>\r\n<li>ResourceAdmin-Applications-AddClientSecretButton-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole Description</li>\r\n<li>ResourceAdmin-Application-Details-AppRights-People-Control</li>\r\n<li>ManageAzureAppWizard Workflow SingleAction Responsible</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinition People Assignments</li>\r\n<li>ResourceAdmin-Application-Details-PbacDefinitions-AppManagementRoles</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefintions SystemType</li>\r\n<li>ResourceAdmin ApplicationDetails Eligibility AssignmentType</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitions People Login</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefintions RoleType</li>\r\n<li>ResourceAdmin Application Details ClientCertificates</li>\r\n<li>ResourceAdmin-Application-Details-PbacAccessAssignments-AppRightsPeople</li>\r\n<li>ResourceAdmin-ApplicationDetails-AppManagementRole-AddNewRightsBundle-Control</li>\r\n<li>ResourceAdmin ApplicationDetails DeleteRoleDefinition Control</li>\r\n<li>ResourceAdmin ApplicationDetails Members Company</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AppRightsTab Control</li>\r\n<li>ResourceAdmin-ApplicationDetails-AppRoleDefinition-AddNewAppRights-Control</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitionDetails Control</li>\r\n<li>ResouceAdmin - Azure Application Details - General Details Column</li>\r\n<li>ResourceAdmin ApplicationDetails AccessGranted ChangeType Control</li>\r\n<li>ResourceAdmin ApplicationDetails SensitiveFunctions FunctionType</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole SensitiveFunctionsTab Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole DeleteRoleDefinition Control</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitions People DisplayName</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole Delete Control</li>\r\n<li>ResourceAdmin-Application-Details-PbacDefinitions</li>\r\n<li>ResourceAdmin-AssignApplicationAppRightToPeople-Control</li>\r\n<li>ResourceAdmin ApplicationDetails SensitiveFunctions Description</li>\r\n<li>Check In Active Checkouts Resource Admin</li>\r\n<li>ResourceAdmin ApplicationDetails Members LastCertified</li>\r\n<li>ResourceAdmin Application List ResponsibleParty</li>\r\n<li>ResourceAdmin-ApplicationAppRightSensativeFunctionsTab-Control</li>\r\n<li>ResourceAdmin-ApplicationFilters-AdvanceSearch-Description</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitions People UIActionsButton Control</li>\r\n<li>ResourceAdmin ApplicationDetails Members AppManagementRole</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AccessGranted TimeConstraint</li>\r\n<li>ResourceAdmin ApplicationDetails Members AddNewAccessAssignment Control</li>\r\n<li>ManageAzureAppWizard Workflow MultiAction Responsible</li>sitive Functions</li>\r\n<li>ResouceAdmin - Application Details - General Details Column</li>\r\n<li>ResourceAdmin ApplicationDetails Eligibility Assignee</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AccessGranted AssigneeType</li>\r\n<li>ResourceAdmin Application Details Role Definition</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole RBACTab Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole RoleDefintions Role</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole RoleDefinitionUIActionButton Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole RoleDefintions Tenant</li>\r\n<li>ResourceAdmin Application Details IAMShopAssignees</li>\r\n<li>ResourceAdmin-ApplicationAppRightPeopleTab-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AccessGranted ResourceType</li>\r\n<li>ResourceAdmin-Application-List-LogoImage</li>\r\n<li>ResourceAdmin-DeleteApplicationAppRight-Control</li>\r\n<li>ResourceAdmin Application Details AppManagementRole DetailButton Control</li>\r\n<li>ResourceAdmin ApplicationDetails Members AddNewAccessAssignment Control</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefintions Tenant</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitions People Enabled</li>\r\n<li>ResourceAdmin-Application-Details-PbacAccessAssignments-RoleDefinitionPeople</li>\r\n<li>ResourceAdmin-Application-List-Actions</li>\r\n<li>ResourceAdmin-Application-Details-PbacAppResources</li>\r\n<li>ResourceAdmin-Application-Details-AppRights-Control</li>\r\n<li>ResourceAdmin-Application-Details-PbacAccessAssignments-RoleDefinitionAssignments</li>\r\n<li>ResourceAdmin-ApplicationDetails-AppRights-AddNewRoleDefinition-Control</li>\r\n<li>ResourceAdmin Application Details Scopes</li>\r\n<li>ResourceAdmin-Applications-AddClientCertificateButton-Control</li>\r\n<li>ResourceAdmin-Application-Details-PbacDefinitions-RoleDefinitions</li>\r\n<li>ResourceAdmin-Application-Details-RoleDefinations-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AppRights DisplayName</li>\r\n<li>ResourceAdmin-ApplicationDetails-AppRoleDefinition-DeleteAppRight-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole SystemType</li>\r\n<li>ResourceAdmin Add New Access Assignment Control</li>\r\n<li>ManageAzureAppWizard Workflow MultiAction Delete</li>\r\n<li>ResourceAdmin-ApplicationDetails-AppRoleDefinition-AppRights-ID</li>\r\n<li>ResourceAdmin ApplicationDetails SensitiveFunctions FunctionName</li>\r\n<li>ResourceAdmin Application Details Role Definition Details Assignments</li>\r\n<li>ResourceAdmin-Application-Details-PbacAccessAssignments</li>\r\n<li>ResourceAdmin-ApplicationAppRightEligibilityTab-Control</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefintions Tenant</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AppRights Description</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole IsHighSecurity</li>\r\n<li>ResourceAdmin-ApplicationDetails-AppRoleDefinition-AppRights-Value</li>\r\n<li>ResourceAdmin-Applications-AddScopeButton-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AppRights ID</li>\r\n<li>ResourceAdmin Application Details Role Definition Details App Rights</li>\r\n<li>ResourceAdmin ApplicationDetails Members Email</li>\r\n<li>ResourceAdmin ApplicationDetails AddNewRoleDefinition Control</li>\r\n<li>ResourceAdmin-Application-Details-RoleDefinations-People-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole MembersTab Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AppRights AllowedMemberTypes</li>\r\n<li>ManageAzureAppWizard Workflow SingleAction RegenerateGroups</li>\r\n<li>ResourceAdmin ApplicationDetails DeleteRoleDefinition Control</li>\r\n<li>ResourceAdmin Application Details AppManagementRoles</li>\r\n<li>ResourceAdmin ParsedHtmlMoreInformation Control</li>\r\n<li>ResourceAdmin ApplicationDetails Members ChangeMembersType Control</li>\r\n<li>ResourceAdmin-Application-Details-PbacAccessAssignments-AppRightsAssignments</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole UIActionsButton Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole PublishedInIAmShop</li>\r\n<li>ResourceAdmin Application Details Role Definition Details People</li>\r\n<li> Show Only Azure Applications Control</li>\r\n<li>ResourceAdmin Application Details AzureApplicationRoles</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefintions RoleType</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole EligibilityTab Control</li>\r\n<li>ResourceAdmin ApplicationDetails Members RemoveMultipleMembers Control</li>\r\n<li>ResourceAdmin Application List TechnicalName</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole RoleDefintions RoleType</li>\r\n<li>ResourceAdmin-ApplicationDetails-AppRoleDefinition-AppRights-DisplayName</li>\r\n<li>ResourceAdmin-Application-Details-AppManagementRoles-Member-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AddNewRoleDefinition Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole RoleDefinitionsTab Control</li>\r\n<li>ResourceAdmin-ApplicationDetails-AppRoleDefinition-AppRights-AllowedMemberTypes</li>\r\n<li>Application Roles Location Filter Resource Admin</li>\r\n<li>ResourceAdmin-Application-Details-AppManagementRoles-Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AddNewAppRights Control</li>\r\n<li>ResourceAdmin ApplicationDetails Members SelectAppManagementRole Control</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitions People Email</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AccessGranted Resource</li>\r\n<li>ResourceAdmin ApplicationDetails AccessGranted AddNewAccessAssignment Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AccessGranted Assignee</li>\r\n<li>ResourceAdmin-DeleteApplicationAppRightAssignments-Control</li>\r\n<li>Applications Advanced Search Control Resource Admin</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole Overview Approvers Control</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole AppRights Value</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole ManagementRoleDefinition</li>\r\n<li>ResourceAdmin ApplicationDetails Members Login</li>\r\n<li>ResourceAdmin ApplicationDetails Eligibility ConfigureEligibility Control</li>\r\n<li>Application Roles Rights Filter Resource Admin</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitionUIActionButton Control</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefintions Role</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefintions SystemType</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole DefaultAccessDuration</li>\r\n<li>ResourceAdmin ApplicationDetails AppManagementRole FriendlyName</li>\r\n<li>Applications Target System Control Resource Admin</li>\r\n<li>ResourceAdmin ApplicationDetails RoleDefinitionDetails Control</li>\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n <li>ResourceAdmin Application Details TokenConfigurations\r\n</li>\r\n<li>ResourceAdmin Applications Page\r\n</li>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab3\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>ListDataItem</li>\r\n <li>AzureTenantView</li>\r\n<li>RequestWorkflowView</li>\r\n<li>OrgZoneView</li>\r\n<li>AssigneeView</li>\r\n\r\n </ul>\r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab4\" role=\"tabpanel\">\r\n <p>Grants <b>Initiator</b> access for the following workflows\r\n <a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Workflows\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"workflowsCollapse\" class=\"collapse\">\r\n <li>Edit App Azure Optional</li>\r\n<li>Create Azure Application Certificate</li>\r\n<li>OnboardAzLocalRole</li>\r\n<li>DeleteAzureAppClientSecret</li>\r\n<li>ManageAzLocalRoleWizard</li>\r\n<li>Assign Application Role</li>\r\n<li>Create Azure App Scope</li>\r\n<li>RemoveAzLocalRightScopeNonWizard</li>\r\n<li>CreateAzureAppClientSecret</li>\r\n<li>Create Azure App App Role</li>\r\n<li>CreateAzureApplicationNoApproval</li>\r\n<li>AddAzLocalRightScopeNonWizard</li>\r\n<li>Update Azure App APIPermissions</li>\r\n<li>DeleteAzureAppScope</li>\r\n<li>CreateAzureApplicationV3</li>\r\n<li>Assign Application Right</li>\r\n<li>Delete Azure App</li>\r\n<li>DeleteAzureAppCertificate</li>\r\n<li>CreateAzureApplication</li>\r\n<li>DeleteProtectedApplication</li>\r\n<li>DeleteAzureAppAppRole</li>\r\n<li>Manage Azure Application Wizard</li>\r\n<p><a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Workflows\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

UI-Res-Admin-MS-Application Base

Feature Set (UI)

This least privilege role provides basic access to the Resource Admin UI for managing applications.The role specifically grants access to the following user interface controls, pages and reports, and applications:

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-third-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab3\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-fourth-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab4\" type=\"button\" role=\"tab\">Applications</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>ResourceAdmin_OwnedApplications_Control</li>\r\n <li>ResourceAdmin Applications Navigation Tabs Control\r\n</li>\r\n <li>ResourceAdmin-Application-List-FriendlyName\r\n</li>\r\n <li>ResourceAdmin-Application-List-Description\r\n</li>\r\n\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n \r\n<li>ResourceAdmin Applications Page\r\n</li>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab3\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>RaProtectedApplication.GetOwnedProtectedApplications</li>\r\n <li>RsAzureRole.GetEligibleAzLocalRolesByApplication</li>\r\n<li>MscGlobalConfig.GetConfigSetting</li>\r\n<li>RaProtectedApplication.GetSingleProtectedApplication</li>\r\n<li>MscPerson.GetPersonByGUID</li>\r\n<li>RaProtectedApplication.GetAllProtectedApplications</li>\r\n<li>MscLocalization.AvailableLanguages</li>\r\n<li>MscProtectedApplication.GetChildren</li>\r\n<li>MscProtectedApplication.AllowedSsoApplications</li>\r\n<li>MscLocalization.GetAnonEntries</li>\r\n<li>ProtectedApplicationsAPI.GetOwnersOrDeputies</li>\r\n<li>MscLocalization.GetByResourceSet</li>\r\n\r\n </ul>\r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab4\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following applications\r\n <a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Workflows\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"workflowsCollapse\" class=\"collapse\">\r\n <li>Resource Admin Microservice App</li>\r\n<p><a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Workflows\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

UI-Res-Admin-MS-Application-Claims-Mapping-Policy

Feature Set (UI)

Provides access to Resource Admin UI for managing Azure Claims Mapping Policies. The role specifically grants access to the following user interface controls, pages and reports, and workflows:

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-fourth-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab4\" type=\"button\" role=\"tab\">Workflows</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>ResourceAdmin-Applications-ClaimsMappingPolicy-Overview-Claims-Control</li>\r\n <li>ResourceAdmin Applications Details Claims Mapping Policy\r\n</li>\r\n <li>ResouceAdmin - Azure Application Details - General Details Column\r\n</li>\r\n <li>ResouceAdmin - Application Details - General Details Column\r\n</li>\r\n<li>ResourceAdmin Applications Navigation Tabs Control</li>\r\n<li>ResourceAdmin Applications Details TokenConfigurations</li>\r\n<li>ResourceAdmin-Applications-ClaimsMappingPolicy-Overview-Applications-Control</li>\r\n<li>ResourceAdmin Applications Details Optional Claims</li>\r\n\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n \r\n<li>ResourceAdmin Application Details TokenConfigurations\r\n</li>\r\n<li>ResourceAdmin Applications Page</li>\r\n<p><a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Pages and Reports\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n \r\n <div class=\"tab-pane fade show\" id=\"tab4\" role=\"tabpanel\">\r\n <p>Grants <b>Initiator</b> access for the following workflows\r\n <a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Workflows\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"workflowsCollapse\" class=\"collapse\">\r\n <li>CreateAzureClaimsMappingPolicy</li>\r\n <li>UpdateAzureClaimsMappingPolicy</li>\r\n <li>UpdateAzAppClaimsMappingPolicyAssignments</li>\r\n<p><a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Workflows\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

UI-Res-Admin-MS-Common

Feature Set (UI)

Provides access for common/shared UI used by the Resource Admin microservice. The role specifically grants Viewer access to the Resource Admin Microservice application.

UI-Res-Admin-MS-Groups

Feature Set (UI)

Provides access to Resource Admin UI for managing Groups. The role specifically grants access to the following user interface controls, pages and reports, and workflows:

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-fourth-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab4\" type=\"button\" role=\"tab\">Workflows</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>ResourceAdmin Groups Details Overview SensitiveFunctions</li>\r\n <li>ResourceAdmin Groups Filter TargetSystem\r\n</li>\r\n <li>ResourceAdmin Group Details MembershipChanges\r\n</li>\r\n <li>ManageGroupWizard Workflow MultiAction Addaccounts\r\n</li>\r\n<li>ResourceAdmin Group Details Members</li>\r\n<li>ResourceAdmin Groups Filter OwnedBy</li>\r\n<li>ResourceAdmin Groups List GroupType</li>\r\n<li>ResourceAdmin Groups Filter AdvancedSearch</li>\r\n<li>ResourceAdmin GroupDetailsSubTabs Control</li>\r\n<li>ResourceAdmin Groups Filter Applications</li>\r\n<li>ResourceAdmin Group Details ResultantMembers</li>\r\n<li>ResourceAdmin Groups Details Overview Rights</li>\r\n<li>ManageGroupWizard Workflow SingleAction AddAccounts</li>\r\n<li>ManageGroupWizard Workflow SingleAction RemoveAccounts</li>\r\n<li>ResourceAdmin Groups Filter Location</li>\r\n<li>ResourceAdmin Groups List TechnicalName</li>\r\n<li>ResourceAdmin Groups Filter BusinessFunctions</li>\r\n<li>ResourceAdmin Groups Filter Rights</li>\r\n<li>ResourceAdmin Groups List ResourceSystem</li>\r\n\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n \r\n<li>ResourceAdmin Groups Page\r\n</li>\r\n<p><a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Pages and Reports\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n \r\n <div class=\"tab-pane fade show\" id=\"tab4\" role=\"tabpanel\">\r\n <p>Grants <b>Initiator</b> access for the following workflows\r\n <a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Workflows\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"workflowsCollapse\" class=\"collapse\">\r\n <li>ManageGroupWizard</li>\r\n<p><a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Workflows\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

UI-Res-Admin-MS-Groups-Base

Feature Set (UI)

This least privileged role provides basic access to Resource Admin UI for managing groups. The role specifically grants access to the following user interface controls, pages and reports, web services, and applications:

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-third-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab3\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-fourth-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab4\" type=\"button\" role=\"tab\">Applications</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>ResourceAdmin_OwnedApplications_Control</li>\r\n <li>ResourceAdmin Applications Navigation Tabs Control\r\n</li>\r\n <li>ResourceAdmin-Application-List-FriendlyName\r\n</li>\r\n <li>ResourceAdmin-Application-List-Description\r\n</li>\r\n\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n \r\n<li>ResourceAdmin Groups Page\r\n</li>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab3\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>MscProtectedApplication.GetChildren</li>\r\n <li>MscLocalization.GetByResourceSet</li>\r\n <li>MscLocalization.GetAnonEntries</li>\r\n <li>MscLocalization.AvailableLanguages</li>\r\n <li>MscPerson.GetPersonByGUID</li>\r\n <li>MscGlobalConfig.GetMultipleConfigSettings</li>\r\n <li>MscProtectedApplication.AllowedSsoApplications</li>\r\n <li>MscGlobalConfig.GetConfigSetting</li>\r\n\r\n </ul>\r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab4\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following applications\r\n <a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Workflows\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"workflowsCollapse\" class=\"collapse\">\r\n <li>Resource Admin Microservice App</li>\r\n<p><a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Workflows\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

UI-Res-Admin-MS-Management-Role

Feature Set (UI)

Provides access to the Resource Admin UI for managing Management Roles. The role specifically grants access to the following user interface controls, pages and reports, and web services:

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-fourth-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab4\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>ResourceAdmin-ManagementRoleDetails-AccessGranted-ResourceType</li>\r\n <li>ResourceAdmin-ManagementRoleDetails-Eligibility-AssigneeType</li>\r\n <li>ResourceAdmin-ManagementRoleDetails-AccessGranted-AssigneeTechnicalName</li>\r\n <li>ResourceAdmin ManagementRole Filter OwnedBy</li>\r\n <li>ResourceAdmin-ManagementRole-Details-Overview-AccessGranted</li>\r\n <li>ResourceAdmin-ManagementRoleDetails-Eligibility-AssignmentType</li>\r\n <li>ResourceAdmin ManagementRole List IsHighSecurity</li>\r\n <l>ResourceAdmin ManagementRole Details AllMembers</l>\r\n <li>ResourceAdmin-ManagementRoleDetails-AccessGranted-Resource</li>\r\n <li>Management Roles Business Functions Filter (Resource Admin)</li>\r\n <li>ResourceAdmin ManagementRole Filter BusinessFunctions</li>\r\n <li>ResourceAdmin-ManagementRoleDetails-Eligibility-EligibilityType</li>\r\n <li>ResourceAdmin-ManagementRole-Details-Overview-Applications</li>\r\n <li>ResourceAdmin ManagementRole Filter Rights</li>\r\n <li>Resource Admin Management Role Details Access Granted</li>\r\n <li>Management Roles Rights Filter (Resource Admin)</li>\r\n <li>ResourceAdmin-ManagementRoleDetails-AccessGranted-AssigneeType</li>\r\n <li>ResourceAdmin-ManagementRole Details Overview Rights</li>\r\n <li>ResourceAdmin-ManagementRole Details Overview SensitiveFunctions</li>\r\n <li>ResourceAdmin ManagementRole Filter AdvancedSearch</li>\r\n <li>ResourceAdmin ManagementRole Details PeopleAsMembers</li>\r\n <li>ResourceAdmin ManagementRole Filter Applications\t\r\n</li>\r\n<liManagement Roles Location Filter (Resource Admin)></li>\r\n<li>ResourceAdmin-ManagementRoleDetails-Eligibility-Assignee</li>\r\n<li>ResourceAdmin-ManagementRoleDetails-AccessGranted-Assignee</li>\r\n<li>ResourceAdmin ManagementRole List Type</li>\r\n<li>ResourceAdmin ManagementRole Filter Location</li>\r\n<li>ResourceAdmin-ManagementRoleDetails-Eligibility-ResourceType</li>\r\n<li>Applications Filter Control (Resource Admin)</li>\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n \r\n<li>ResourceAdmin ManagementRoles Page\r\n</li>\r\n<p><a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Pages and Reports\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n \r\n <div class=\"tab-pane fade show\" id=\"tab4\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Web Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>RaManagementRoles.GetAllManagementRoleDefinitions</li>\r\n<p><a href=\"#servicessCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Web Services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

UI-Res-Admin-MS-Management-Roles-Base

Feature Set (UI)

This least privilege role provides basic access to the Resource Admin UI for managing Management Roles. The role specifically grants access to the following user interface controls, pages, and reports:

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>ResourceAdmin ManagementRole Filter OwnedBy</li>\r\n <li>ResourceAdmin ManagementRole Details PeopleAsMembers</li>\r\n <li>ResourceAdmin ManagementRole Details AllMembers</li>\r\n\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n \r\n<li>ResourceAdmin ManagementRoles Page</li>\r\n </ul>\r\n \r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

UI-Res-Admin-MS-Shared-Folders

Feature Set (UI)

Provides access to the Resource Admin UI for managing Shared Folders. The role specifically grants access to the following user interface controls, pages and reports, and web services:

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-fourth-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab4\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>ResourceAdmin-SharedFolderDetails-IAMShopAssignments-Assignee</li>\r\n <li>Shared Folders Advanced Search Control (IT Shop)</li>\r\n <li>ResourceAdmin-SharedFolderDetails-IAMShopAssignments-AccessFulfilledByAssignee</li>\r\n <li>ResourceAdmin-SharedFolder-AccessAssignmentsForFolder-RequestId</li>\r\n <li>Shared Folders Unc Path Control (IT Shop)</li>\r\n <li>ResourceAdmin-SharedFolderDetails-IAMShopAssignments-AssigneeTechnicalName</li>\r\n <li>ResourceAdmin-SharedFolderDetails-IAMShopAssignments-AddAssignment-Control</li>\r\n <li>ResourceAdmin-SharedFolder-AccessAssignmentsForFolder-AccessLevel</li>\r\n<li>ResourceAdmin-SharedFolderDetails-IAMShopAssignments-PermissionLevel</li>\r\n<li>Shared Folders Owned By Filter (Resource Admin)</li>\r\n<li>Shared Folders UNC Path Filter (Resource Admin)</li>\r\n<li>ResourceAdmin-SharedFolderDetails-IAMShopAssignments-Resource</li>\r\n<li>Shared Folders Advanced Search Filter (Resource Admin)</li>\r\n<li>ResourceAdmin-SharedFolder-AccessAssignmentsForFolder-TimeConstraint</li>\r\n<li>ResourceAdmin-SharedFolder-AccessAssignmentsForFolder-AssigneeDetails</li>\r\n<li>ResourceAdmin-SharedFolder-AccessAssignmentsForFolder-ActionButton</li>\r\n<li>Shared Folders Page (ITShop)</li>\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n \r\n<li>ResourceAdmin SharedFolders Page</li>\r\n<p><a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Pages and Reports\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n \r\n <div class=\"tab-pane fade show\" id=\"tab4\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Web Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>RaSharedFoldersAPI.GetSingleSharedFolder</li>\r\n <li>RaSharedFoldersAPI.GetAllSharedFolders</li>\r\n <li>RaSharedFoldersAPI.GetSharedFolderDirectLocations</li>\r\n <li>RaSharedFoldersAPI.GetSharedFolderAllLocations</li>\r\n <li>SharedFoldersAPI.GetAllSharedFolders</li>\r\n<p><a href=\"#servicessCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Web Services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

UI-Res-Admin-MS-Shared-Folders-Base

Feature Set (UI)

This least privileged role provides basic access to Resource Admin UI for managing shared folders. The role specifically grants access to the following user interface controls, pages, and reports:

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Shared Folders Owned By Filter (Resource Admin)</li>\r\n \r\n\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n \r\n </div>\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n \r\n<li>ResourceAdmin SharedFolders Page</li>\r\n </ul>\r\n \r\n \r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

VIS-Res-Admin-MS-API

Visibility (VIS)

Provides access to the base web services required by all users of the Resource Admin microservice.

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <div>\r\n <p>View web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n \r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n\r\n\r\n <li>RaProtectedApplication.GetAllProtectedApplications</li>\r\n<li>MscExternalCredential.DeleteCredential</li>\r\n<li>MscUIAction.GetByNounVerb</li>\r\n<li>MscExternalCredential.GetsCheckedoutRecords</li>\r\n<li>RsAzureRole.UnAssignRoleDefinition</li>\r\n<li>RsAzureRole.GetAllAssigmnentsOfRoleDefinitionByApplication</li>\r\n<li>RsAdminPBACAppResources.AddPbacAppResources</li>\r\n<li>RaManagementRoles.DeleteManagementRole</li>\r\n<li>AzureAppRoles.DeleteLocalRightAssignments</li>\r\n<li>MscResourceAccessRequestAssignee.AddResourceAssignees</li>\r\n<li>ExternalCredentialsAPI.CheckInCredential</li>\r\n<li>AzureCertificate.ValidateMasterPassword</li>\r\n<li>RaEligibilityAssignments.GetAllEligibilityAssignments</li>\r\n<li>AzureScopes.GetAzureScopeSingle</li>\r\n<li>ExternalCredentialsAPI.GetAllAssignedExternalCredentials</li>\r\n<li>AzureSecret.GetSingleSecret</li>\r\n<li>AzureAppRoles.GetAzureAppRoleSingle</li>\r\n<li>RaSharedFoldersAPI.GetAllSharedFolders</li>\r\n<li>UIActionView</li>\r\n<li>ExternalCredentialsAPI.GetCheckedOutByPersonId</li>\r\n<li>RsAdminPBACResourceTypes.GetAllPBACResourceTypes</li>\r\n<li>MscOrgRoles.GetOrgRolesTree</li>\r\n<li>AppRolesMembersAPI.DeleteAppRoleMember</li>\r\n<li>RaAssigneeAssignments.GetRoleDefinitionsByManagmentRole</li>\r\n<li>AzureClaims.GetAzureOptionalClaimsAdditionalProperties</li>\r\n<li>RsPeople.GetSinglePeople</li>\r\n<li>MscAccessRequestPolicy.GetAll</li>\r\n<li>RaManagementRoles.GetPeopleAsManagementRoleMembers</li>\r\n<li>AzureAppRoles.GetAllAzureAppRoles</li>\r\n<li>PersonView</li>\r\n<li>ResourceSystemModuleView</li>\r\n<li>SharedFoldersAPI.GetAllSharedFolders</li>\r\n<li>RaManagementRoles,GetDirectAccessGrantedByProtectedApplicationId</li>\r\n<li>MscGlobalConfig.GetConfigSetting</li>\r\n<li>MscExternalCredential.GetsCheckedoutRecords</li>\r\n<li>RsAzureRole.GetAllAzLocalRoles</li>\r\n<li>RaClaimMappingPolicy.GetAllClaimMappingPolicies</li>\r\n<li>AzureScopes.GetAllAzureScopes</li>\r\n<li>RaManagementRoles.GetPersonViewMembers</li>\r\n<li>RaManagementRoles.GetAllOwnedManagementRoles</li>\r\n<li>ProtectedApplicationsAPI.GetAllProtectedApplications</li>\r\n<li>RaManagementRoles.GetAllManagementRoleDefinitions</li>\r\n<li>RsAdminPBACAppResources.GetAllAppResources</li>\r\n<li>RaManagementRoles.GetLocalRightsGranted</li>\r\n<li>ProtectedApplicationsAPI.GetSingleAzureApplication</li>\r\n<li>RaAssigneeAssignments.GetRbacAccessAssignments</li>\r\n<li>RsAzureRole.GetAllMembersByRoleDefinition</li>\r\n<li>RsAzureRole.GetEligibleAzLocalRolesByApplication</li>\r\n<li>RaAssigneeAssignments.DeleteAssignments</li>\r\n<li>AzureAppRoles.GetAllMembersByAppRight</li>\r\n<li>AzureAppRoles.UnasignRightsFromPerson</li>\r\n<li>ApiPermission.DeletePermission</li>\r\n<li>MscUIAction.GetByResourceID</li>\r\n<li>AzureClaims.GetClaimsMappingPolicy</li>\r\n<li>AzureCertificate.GetAzureCertificates</li>\r\n<li>MscPerson.PeopleToSetAsApprover</li>\r\n<li>AzureTenantView</li>\r\n<li>OrgZoneView</li>\r\n<li>AzRightAllowedAssigeeType</li>\r\n<li>MscExternalCredential.DeleteCredential</li>\r\n<li>MscPerson.GetSearch</li>\r\n<li>BusinessFunctionsAPI.LocalFunctionsByRole</li>\r\n<li>MscProtectedApplication.GetTargetSystemFilterData</li>\r\n<li>MscFunction.LocalFunctionsByAzLocalRightID</li>\r\n<li>AzGlobalRightView</li>\r\n<li>AzureAppRoles.DeleteAppRole</li>\r\n<li>RsAdminPBACResourceTypes.CreatePBACResourceType</li>\r\n<li>BusinessFunctionsAPI.LocalRightsByAssigneeId</li>\r\n<li>MscOrgRoles.GetOrgZozesTree</li>\r\n<li>BusinessFunctionsAPI.GetFunctions</li>\r\n<li>AzureAppRoles.GetAllLocalRightsByManagementRoleId</li>\r\n<li>MscPerson.PeopleToSetAsDelegate</li>\r\n<li>ProtectedApplicationsAPI.GetAllAzureApplications</li>\r\n<li>CartSubmissionRaAPI.SubmitCart</li>\r\n<li>RsPeople.GetAllPeople</li>\r\n<li>RaManagementRoles.GetLocalRolesGranted</li>\r\n<li>ProtectedApplicationsAPI.GetSingleProtectedApplication</li>\r\n<li>RaManagementRoles.DeleteManagementRoleMembers</li>\r\n<li>RequestWorkflowView</li>\r\n<li>ExternalCredentialsAPI.GetAllExternalCredentials</li>\r\n<li>AzureClaims.GetAzureOptionalClaims</li>\r\n<li>RaManagementRoles.GetSingleManagementRole</li>\r\n<li>AzureApplicationView</li>\r\n<li>OrgRoleOrgZone</li>\r\n<li>RsAdminMailBoxAPI.GetInventoriedPermissions</li>\r\n<li>RsPeople.GetAllPeopleByEligibleResource</li>\r\n<li>MscProtectedApplication.SearchApplications</li>\r\n<li>AzureCertificate.GetExternalCredentialProxy</li>\r\n<li>ExternalCredentialSharedPerson</li>\r\n<li>RsAdminPBACAppResources.DeletePbacAppResources</li>\r\n<li>AzureSecret.ValidateMasterPassword</li>\r\n<li>MscLocalization.GetAnonEntries</li>\r\n<li>RsAzureRole.GetSingleAzLocalRole</li>\r\n<li>RaManagementRoles.GetSingleManagementRole</li>\r\n<li>RaProtectedApplication.GetOwnedProtectedApplications</li>\r\n<li>RsPeople.AssignRoleDefinitionsForPerson</li>\r\n<li>ExternalCredentialsAPI.ValidateMasterPassword</li>\r\n<li>MscLocalization.AvailableLanguages</li>\r\n<li>MscProtectedApplication.AllowedSsoApplications</li>\r\n<li>ExternalCredentialSharedPersonView</li>\r\n<li>RsAdminMailBoxAPI.GetAllExchangeMailBoxes</li>\r\n<li>MscUIAction.GetByNoun</li>\r\n<li>AppRolesMembersAPI.GetAppRolesResultantMembers</li>\r\n<li>RaSharedFoldersAPI.GetSingleSharedFolder</li>\r\n<li>MscPerson.GetPhoto</li>\r\n<li>RaManagementRoles.GetAllManagementRoles</li>\r\n<li>ExternalCredentialsAPI.GetSingleExternalCredential</li>\r\n<li>MscAccessRequestPolicy.GetByResourceID</li>\r\n<li>RaAssigneeAssignments.GetManagementRolesAccessGrantedResources</li>\r\n<li>RaSharedFoldersAPI.GetSharedFolderAllLocations</li>\r\n<li>RsAdminMailBoxAPI.ManageNationPersistence</li>\r\n<li>RsPeople.UpdatePerson</li>\r\n<li>RsAdminMailBoxAPI.GetNations</li>\r\n<li>RaAssigneeAssignments.UpdateRbacAccessAssignments</li>\r\n<li>RsAdminMailBoxAPI.GetExchangeMailBoxes</li>\r\n<li>AzureAppRoles.GetEligibleAzLocalRightsByApplication</li>\r\n<li>MscResourceAccessRequestAssignee.GetByResourceIdForAssignee</li>\r\n<li>ApiPermission.GetAllPermissions</li>\r\n<li>ExternalCredentialsAPI.GetExternalCredentialProxy</li>\r\n<li>BusinessLocationsAPI.Search</li>\r\n<li>AzureAppRoles.GetAllMembersByApplication</li>\r\n<li>RaClaimMappingPolicy.GetAllClaimMappingPolicies</li>\r\n<li>RsAzureRole.DeleteAzLocalRoles</li>\r\n<li>ApiPermission.GetSinglePermission</li>\r\n<li>RaManagementRoles.GetAllManagementRoles</li>\r\n<li>RaSharedFoldersAPI.GetSharedFolderDirectLocations</li>\r\n<li>AzureAppRoles.UnassignRightsToPerson</li>\r\n<li>MscFunction.GlobalFunctionResultSetByAssignee</li>\r\n<li>MscFunction.LocalFunctionsByAssignee</li>\r\n<li>AzureCertificate.GetSingleAzureCertificate</li>\r\n<li>MscPerson.OwnersByResourceId</li>\r\n<li>AzureClaims.GetAllAzureClaims</li>\r\n<li>MscResourceTypeRole.GetByResourceId</li>\r\n<li>RsPeople.OwnersByResourceId</li>\r\n<li>MscOrgRoles.GetAzureLocations</li>\r\n<li>SODAPI.ResAdminCheckForSOD</li>\r\n<li>RaProtectedApplication.GetSingleProtectedApplication</li>\r\n<li>AzureScopes.DeleteScope</li>\r\n<li>AzureApplicationTemplateView</li>\r\n<li>AzureSecret.GetExternalCredentialProxy</li>\r\n<li>MscPerson.GetPersonByGUID</li>\r\n<li>ProtectedApplicationResourceView</li>\r\n<li>ProtectedApplicationsAPI.GetOwnersOrDeputies</li>\r\n<li>ExternalCredentialsAPI.GetCheckedOutRecords</li>\r\n<li>MscResourceTypeRole.GetAllResourceTypeRoles</li>\r\n<li>AzureClaims.GetAzureOptionalClaims</li>\r\n<li>UIActionResourceTypeView</li>\r\n<li>PasswordPolicy.UpdateLocale</li>\r\n<li>AzureClaims.GetAzureOptionalClaimsAdditionalProperties</li>\r\n<li>RaManagementRoles,GetDirectAccessGrantedByProtectedApplicationIdByManagementRoleId</li>\r\n<li>RsAzureRole.GetSingleAzLocalRole</li>\r\n<li>AzureSecret.GetAllSecrets</li>\r\n<li>MscResourceAccessRequestAssignee.DeleteResourceAssignees</li>\r\n<li>AzureAppRoles.GetAllLocalRightsByRoleDefinitionId</li>\r\n<li>ListDataItem</li>\r\n<li>AssigneeEligibleAssignmentView</li>\r\n<li>MscUtility.ListItemsBySetName</li>\r\n<li>AppRolesMembersAPI.GetAppRolesMembers</li>\r\n<li>AppRolesMembersAPI.GetAppRolesMemberChanges</li>\r\n<li>RsPeople.GetOwnersAndApprovers</li>\r\n<li>MscProtectedApplication.LinkedApplications</li>\r\n<li>MscProtectedApplication.GetChildren</li>\r\n<li>MscResourceAccessRequestAssignee.AddResourceAssignees</li>\r\n<li>AzureAppRoles.GetEligibleAzLocalRightsByApplicationByAssignee</li>\r\n<li>RaAssigneeAssignments.GetAppRightsByManagmentRole</li>\r\n<li>AzureAppRoles.AssignRightsToPerson</li>\r\n<li>MscLocalization.GetByResourceSet</li>\r\n<p><a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n\r\n </div>\r\n ","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}

...

Insert excerpt

	IL:External Stylesheet
	IL:External Stylesheet
nopanel	true

...

Version	Old Version 1	New Version Current
Changes made by	Phillip Hanegan	Phillip Hanegan
Saved on	Aug 20, 2024	Dec 23, 2024

Versions Compared

Key

Viewing Assigned Management Roles