Versions Compared

Old Version 1

changes.mady.by.user Phillip Hanegan

Saved on

compared with

New Version Current

changes.mady.by.user Phillip Hanegan

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

EmpowerID employs a structured approach to access management through the use of Management Roles, which are essential in restricting and delegating access to various resources and functionalities. These roles are categorized based on their function within EmpowerID and are prefixed accordingly to signify their specific utility. This framework is particularly effective for delegating access to partners, ensuring they have the necessary permissions to manage their operations within the system while maintaining overall security and integrity.

Types of Management Roles:

  1. UI (User Interface) Management Roles:

    • Purpose: These roles are specifically designed to grant access to particular UI elements within the EmpowerID Web interface.

    • Functionality: Users assigned UI-prefixed roles can interact with specific parts of the interface, which may include administrative panels, reporting dashboards, or user management screens, depending on the role's specifications.

  2. VIS (Visibility) Management Roles:

    • Purpose: VIS-prefixed roles enable users to view specific objects within EmpowerID.

    • Functionality: This access is crucial for monitoring, oversight, and management purposes. Users can see certain data or system components, aiding in informed decision-making and operational control.

  3. ACT (Action) Management Roles:

    • Purpose: ACT-prefixed roles empower users to manage specific objects within EmpowerID.

    • Functionality: These roles involve a higher level of access, allowing users to perform actions like modifying, adding, or removing certain objects or settings in the system.

  4. Role Bundles (RB) Management Roles

    • Definition: RB Management Roles are composite roles that include a collection of various Management Roles.

    • Utility: These role bundles simplify the process of delegating access by grouping related roles into a single assignment.

    • Access Provision: Users assigned an RB Management Role inherit the access rights of all the individual roles included in that bundle, making it an efficient method to grant comprehensive permissions tailored to specific user needs or partner requirements.

...

To make delegating access to partners easy, EmpowerID includes the following two Role Bundle Management Roles.

Partner Admin Role Bundle

Management Role

Role Type

Description

UI-Person-Object-Administration

Feature Set (Ui)

Provides access to Person Object UI and workflows. The role specifically grants access to the following user interface controls, pages and reports, and workflows:

Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabUI\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabPages\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-third-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabWorkflows\" type=\"button\" role=\"tab\">Workflows</button>\r\n </li>\r\n</ul>\r\n\r\n<!--UI Controls-->\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tabUI\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Person View One Org Chart Accordion</li>\r\n <li>Navbar - global side panel for nav links</li>\r\n <li>Login Assistance WF Send Azure TAP Action</li>\r\n <li>Login Assistance WF Unlock From QA Action</li>\r\n <li>Global Search Box</li>\r\n <li>Navbar Support Help Section</li>\r\n <li>Login Assistance WF Unenroll From QA Action</li>\r\n <li>View One Person Page Manage Tab</li>\r\n <li>Find Person Page People Tab</li>\r\n <li>Resultant Resource Locations page</li>\r\n <li>Find Person Page Pending Termination Tab</li>\r\n <li>Login Assistance WF Reset EmpowerID MFA Action</li>\r\n <li>NavBar User Sections</li>\r\n <li>Login Assistance WF Send Change Password Invite Action</li>\r\n <li>Login Assistance WF Send EID OTP Action</li>\r\n <li>Person Edit One Page Photo Edit</li>\r\n <li>Find Person Page Deleted People Tab</li>\r\n <li>Person View One Page Actions Accordion</li>\r\n <li>Login Assistance WF Reset Azure MFA Action</li>\r\n <li>\tLogin Assistance WF Unlock Person Accounts Action</li>\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n \r\n <!--Pages and Reports-->\r\n <div class=\"tab-pane fade show\" id=\"tabPages\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n <li>Reset Password page</li>\r\n <li>Create Person Advanced EditOne</li>\r\n <li>View One Person Page</li>\r\n <li>Edit Person Page</li>\r\n <li>Edit Person Contextual Page</li>\r\n <li>Create Person Simple Page</li>\r\n <li>Find Person page</li>\r\n </ul>\r\n </div>\r\n \r\n <!--Workflows-->\r\n <div class=\"tab-pane fade show\" id=\"tabWorkflows\" role=\"tabpanel\">\r\n <p>Grants <b>Initiator</b> access for the following workflows\r\n <a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Workflows\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"workflowsCollapse\" class=\"collapse\">\r\n <li>Disable Multiple People Wf</li>\r\n <li>Invite User to Join Organization</li>\r\n <li>Onboard Person</li>\r\n <li>Delete Multiple People With Options</li>\r\n <li>Add or Remove Person Photo</li>\r\n <li>Login Assistance Wizard</li>\r\n <li>Person Edit workflow used on person editone page</li>\r\n <li>Enable Multiple People Wf</li>\r\n <li>Reset Password</li>\r\n <li>Restore Multiple Deleted People</li>\r\n <li>Onboard Person Person Step Approval WF</li>\r\n <li>Rehire Check</li>\r\n <li>Create Person</li>\r\n <li>Manage Person Wizard</li>\r\n <li>Update Person Relationships</li>\r\n<p><a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Workflows\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
UI-Person-Password-Helpdesk
Feature Set (UI)
Grants access to perform assisted password resets and unlocks. The role specifically grants access to the following user interface controls, pages and reports, and workflows:
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabUI\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabPages\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-third-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabWorkflows\" type=\"button\" role=\"tab\">Workflows</button>\r\n </li>\r\n</ul>\r\n\r\n<!--UI Controls-->\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tabUI\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Login Assistance WF Send EID OTP Action</li>\r\n <li>Password Management - node in navigation - for organization only</li>\r\n <li>View One Person Page General Tab</li>\r\n <li>Login Assistance WF Reset Azure MFA Action</li>\r\n <li>Login Assistance WF Send Azure TAP Action</li>\r\n <li>Login Assistance WF Reset EmpowerID MFA Action</li>\r\n <li>Login Assistance WF Send Change Password Invite Action</li>\r\n <li>Password Workflows</li>\r\n <li>Find Person Page People Tab</li>\r\n <li>Login Assistance WF Unlock From QA Action</li>\r\n <li>Login Assistance WF Unenroll From QA Action</li>\r\n <li>Login Assistance WF Unlock Person Accounts Action</li>\r\n <li>Person View One Page Actions Accordion</li>\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n \r\n <!--Pages and Reports-->\r\n <div class=\"tab-pane fade show\" id=\"tabPages\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n <li>Reset Password page</li>\r\n <li>Find Person page</li>\r\n <li>View One Person Page</li>\r\n </ul>\r\n </div>\r\n \r\n <!--Workflows-->\r\n <div class=\"tab-pane fade show\" id=\"tabWorkflows\" role=\"tabpanel\">\r\n <p>Grants <b>Initiator</b> access for the following workflows\r\n <a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Workflows\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"workflowsCollapse\" class=\"collapse\">\r\n <li>Unlock Person And Accounts</li>\r\n <li>Helpdesk Password Reset</li>\r\n <li>Helpdesk Account Unlock</li>\r\n <li>Reset Password</li>\r\n <li>Login Assistance Wizard</li>\r\n <li>Unlock From Password Reset Center</li>\r\n <li>Disable Multiple People Wf</li>\r\n<p><a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Workflows\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
VIS-OrgRoleOrgZone-ALL
Visibility (VIS)
Grants access to see all Business Role and Location combinations. The role specifically grants access to the following user interface controls and web services:
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Business Role Assignee Type</li>\r\n </ul>\r\n </div>\r\n\r\n\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>OrgRoleOrgZoneView</li>\r\n <li>AssigneeEligibleAssignmentExclusionView</li>\r\n <li>AssigneeView</li>\r\n <li>OrgRoleOrgZoneResourceRoleResultSet</li>\r\n <li>VisibilityRBACObjectAssignmentView</li>\r\n <li>AssigneeEligibleAssignmentView</li>\r\n <li>PersonOrgRoleOrgZoneResultSet</li>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
ACT-Location-Object-Administration-MyLocationsBelow
Activity (ACT)
Provides access to create, edit, and delete all locations in the person’s locations and below. 
ACT-Person-Object-Administration-MyOrg
Activity (ACT)
Provides access to create, edit, and delete Person objects in the person’s organization. 
ACT-Person-Password-Helpdesk-MyOrg
Activity (ACT)
Provides access to assist people in the person's organization by resetting passwords and unlocking accounts.
Partner User
Role Bundle
See the Partner User Role Bundle table below for details about the access granted by the role.
Partner User Role Bundle
Management Role
Role Type
Description
UI-IT-Shop-MS-Management-Role
Feature Set (Ui)
Grants access to shop for EmpowerID Management Roles in the IT Shop microservice app. The role specifically grants access to the following user interface controls, pages and reports, web services, and workflows:
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabUI\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabPages\" type=\"button\" role=\"tab\">Pages and Reports</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-third-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabServices\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-fourth-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tabWorkflows\" type=\"button\" role=\"tab\">Workflows</button>\r\n </li>\r\n</ul>\r\n\r\n<!--UI Controls-->\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tabUI\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Management Roles Type Friendly Name Attribute Control (IT Shop)</li>\r\n <li>Suggested Management Roles Control (IT Shop)</li>\r\n <li>ITSHOP-ManagementRoles-ManageAccessAccess</li>\r\n <li>ITShop-DirectAssignedManagementRoles-Control</li>\r\n <li>TCodes Grid Control (IT Shop)</li>\r\n <li>Management Roles Applications Control (IT Shop)</li>\r\n <li>ITShop-TimeConstrainedManagementRoles-Control</li>\r\n <li>Manage Access Business Request Attribute Control (IT Shop)</li>\r\n <li>Management Roles Business Functions Control (IT Shop)</li>\r\n <li>Suggested Management Roles Grid Control IT Shop</li>\r\n <li>\tPre-Approved Management Roles Control (IT Shop)</li>\r\n <li>Management Roles TCode Control (IT Shop)</li>\r\n <li>ITSHOP-ManagementRoles-RequestAccess</li>\r\n <li>\tManagement Roles Name Attribute Control (IT Shop)</li>\r\n <li>Management Roles Advanced Search Control (IT Shop)</li>\r\n <li>Management Roles Owners Attribute Control (IT Shop)</li>\r\n<p><a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Controls\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n \r\n <!--Pages and Reports-->\r\n <div class=\"tab-pane fade show\" id=\"tabPages\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following pages and reports\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Pages and Reports\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n <li>Management Roles Page (ITShop)</li>\r\n </ul>\r\n </div>\r\n \r\n <!--Web Services-->\r\n <div class=\"tab-pane fade show\" id=\"tabServices\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#pagesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Web Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"pagesCollapse\" class=\"collapse\">\r\n <li>ManagementRolesAPI.GetManagementRoles</li>\r\n <li>ManagementRolesAPI.CheckAssignmentStatus</li>\r\n <li>ManagementRolesAPI.GetAllAssigned</li>\r\n <li>ManagementRolesAPI</li>\r\n <li>ManagementRolesAPI.GetSingleManagementRole</li>\r\n </ul>\r\n </div>\r\n \r\n <!--Workflows-->\r\n <div class=\"tab-pane fade show\" id=\"tabWorkflows\" role=\"tabpanel\">\r\n <p>Grants <b>Initiator</b> access for the following workflows\r\n <a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Workflows\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"workflowsCollapse\" class=\"collapse\">\r\n <li>Add Person To Preapproved Resource WF</li>\r\n <li>Add Person To Management Role WF</li>\r\n<p><a href=\"#workflowsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Workflows\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
VIS-Management-Role-MyOrg
Visibility (VIS)
Grants access to see management roles in the person’s organizations. The role specifically grants access to invoke the following web services:
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Web Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>ManagementRoleDefinitionResourceTypeRoleLocationResultSet</li>\r\n <li>ManagementRoleDefinitionResourceRoleDirectResultSet</li>\r\n <li>ManagementRole.GetAnonymousInfo</li>\r\n <li>ManagementRolesAPI.GetSuggestedManagementRolesByAssigneeId</li>\r\n <li>EmpowerIDStatOrganizationView</li>\r\n <li>ManagementRoleDefinitionResourceRoleExtendedResult</li>\r\n <li>ManagementRoleDefinitionRTRPRResource</li>\r\n <li>VisibilityRBACObjectAssignmentView</li>\r\n <li>ManagementRole.AnonymousCall</li>\r\n <li>EligibilityType</li>\r\n <li>ManagementRoleResourceRole</li>\r\n <li>ManagementRoleType</li>\r\n <li>ManagementRoleDefinitionView</li>\r\n <li>ManagementRole</li>\r\n <li>ManagementRoleDefinitionOrgZoneResourceTypeRole</li>\r\n <li>ManagementRoleView</li>\r\n <li>ManagementRoleDefinition</li>\r\n <li>ManagementRoleGroupManagementRole</li>\r\n <li>ResourceAttestationView</li>\r\n <li>ManagementRoleDefinitionResourceRoleResultSet</li>\r\n <li>ManagementRoleResourceRoleDirectResultSet</li>\r\n <li>ManagementRoleResourceRoleExtendedResultSet</li>\r\n <li>ManagementRoleResourceRoleView</li>\r\n <li>ManagementRoleSearch</li>\r\n <li>ManagementRoleDefinitionResourceTypeRoleLocationRe</li>\r\n <li>ManagementRoleMemberManagementRole</li>\r\n <li>ManagementRolesAPI.GetSingleManagementRole</li>\r\n <li>ManagementRolesAPI.GetManagementRoles</li>\r\n <li>ManagementRolesAPI.GetAllAssigned</li>\r\n <li>ManagementRolesAPI.CheckAssignmentStatus</li>\r\n <li>Management Role Assignee Type</li>\r\n <li>AssigneeEligibleAssignmentView</li>\r\n <li>ManagementRole.GetUserGroups</li>\r\n <li>ManagementRole.HellowWorld</li>\r\n <li>ManagementRolesData.GetUser</li>\r\n <li>ManagementRolesAPI.OwnersByManagementRoleId</li>\r\n <li>ManagementRoleOrgZoneResourceTypeRole</li>\r\n <li>ManagementRoleRTRPRResource</li>\r\n <li>ManagementRoleDefinitionResourceRole</li>\r\n <li>ManagementRoleRbacAssignment</li>\r\n <li>ManagementRoleGroup</li>\r\n <li>ManagementRoleDefinitionResourceRoleExtendedResultSet</li>\r\n <li>ManagementRoleResourceRoleResultSet</li>\r\n <li>ManagementRoleResourceTypeRoleLocationResultSet</li>\r\n <li>PersonManagementRoleView</li>\r\n <li>ResourceEntitlementAssigneeResultSet</li>\r\n <li>AssigneeView</li>\r\n <li>ManagementRoleDefinitionSearch</li>\r\n <li>ManagementRoleDefinitionResourceRoleDirectResultSe</li>\r\n <li>ManagementRoleMemberManagementRoleView</li>\r\n <li>ManagementRole.Start</li>\r\n <li>ManagementRole.GetAnonymousInfo</li>\r\n <li>ManagementRole.GetUserGroups</li>\r\n <li>ManagementRole.GetUser</li>\r\n <li>ManagementRole.AnonymousCall</li>\r\n <li>ManagementRolesData</li>\r\n <li>ManagementRolesData.GetManagementRolesByPersonGuid</li>\r\n <li>ManagementRolesData.GetAnonymousInfo</li>\r\n <li>ManagementRolesData.GetUserGroups</li>\r\n <li>ManagementRolesData.GetUser</li>\r\n <li>ManagementRolesAPI.OwnersByManagementRoleId</li>\r\n <li>ManagementRolesAPI.GetSuggestedManagementRolesByAssigneeId</li>\r\n <li>ManagementRolesAPI.GetAllAssignedByOrgRoleOrgZoneId</li>\r\n <li>ManagementRolesAPI.GetAllAssignedByManagementRoleId</li>\r\n <li>ManagementRoleDefinitionResourceRoleView</li>\r\n <p><a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Web Services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
VIS-Person-MyOrg
Visibility (VIS)
Grants access to see people in the person’s organizations. The role specifically grants access to the following user interface controls and web services:
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Person Assignee Type</li>\r\n </ul>\r\n </div>\r\n\r\n\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>PersonOrgRoleOrgZone</li>\r\n <li>MscPerson.OwnersByResourceId</li>\r\n <li>ListDataItemView</li>\r\n <li>ResourceTag</li>\r\n <li>PersonOrgRoleOrgZoneAssignment</li>\r\n <li>CatalogCategoryView</li>\r\n <li>MscPerson.GetSearch</li>\r\n <li>AssigneeLoginAssociationView</li>\r\n <li>CertificateStoreView</li>\r\n <li>PersonView</li>\r\n <li>ListDataItem</li>\r\n <li>PersonSearch</li>\r\n <li>PersonOrgRoleOrgZoneView</li>\r\n <li>EmpowerIDStatOrganizationView</li>\r\n <li>RequestWorkflowView</li>\r\n <li>PersonAttributeDefaultValueAssigneeResultSet</li>\r\n <li>RbacAssigneeAssignmentView</li>\r\n <li>MscPerson.GetPersonByGUID</li>\r\n <li>MscPerson.GetLinkedPeople</li>\r\n <li>PersonRelationshipView</li>\r\n <p><a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Web Services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
VIS-Management-Role-All
Visibility (VIS)
Grants access to see all Management Roles. The role specifically grants access to invoke the following web services:
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Web Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>AccessRequestPolicyView</li>\r\n <li>AssigneeEligibleAssignmentExclusionView</li>\r\n <li>AssigneeEligibleAssignmentView</li>\r\n <li>AssigneeView</li>\r\n <li>EligibilityType</li>\r\n <li>EmpowerIDStatOrganizationView</li>\r\n <li>Management Role Assignee Type</li>\r\n <li>Management Role Definition Assignee Type</li>\r\n <li>ManagementRole</li>\r\n <li>ManagementRole.AnonymousCall</li>\r\n <li>ManagementRole.GetAnonymousInfo</li>\r\n <li>ManagementRole.GetByManagementRoleInfo</li>\r\n <li>ManagementRole.GetUser</li>\r\n <li>ManagementRole.GetUserGroups</li>\r\n <li>ManagementRole.HellowWorld</li>\r\n <li>ManagementRole.Resume</li>\r\n <li>ManagementRole.Start</li>\r\n <li>ManagementRoleDefinition</li>\r\n <li>ManagementRoleDefinitionOrgZoneResourceTypeRole</li>\r\n <li>ManagementRoleDefinitionResourceRole</li>\r\n <li>ManagementRoleDefinitionResourceRoleDirectResultSe</li>\r\n <li>ManagementRoleDefinitionResourceRoleDirectResultSet</li>\r\n <li>ManagementRoleDefinitionResourceRoleExtendedResult</li>\r\n <li>ManagementRoleDefinitionResourceRoleExtendedResultSet</li>\r\n <li>ManagementRoleDefinitionResourceRoleResultSet</li>\r\n <li>ManagementRoleDefinitionResourceRoleView</li>\r\n <li>ManagementRoleDefinitionResourceTypeRoleLocationRe</li>\r\n <li>ManagementRoleDefinitionResourceTypeRoleLocationResultSet</li>\r\n <li>ManagementRoleDefinitionRTRPRResource</li>\r\n <li>ManagementRoleDefinitionSearch</li>\r\n <li>ManagementRoleDefinitionView</li>\r\n <li>ManagementRoleGroup</li>\r\n <li>ManagementRoleGroupManagementRole</li>\r\n <li>ManagementRoleMemberManagementRole</li>\r\n <li>ManagementRoleMemberManagementRoleView</li>\r\n <li>ManagementRoleOrgZoneResourceTypeRole</li>\r\n <li>ManagementRoleRbacAssignment</li>\r\n <li>ManagementRoleResourceRole</li>\r\n <li>ManagementRoleResourceRoleDirectResultSet</li>\r\n <li>ManagementRoleResourceRoleExtendedResultSet</li>\r\n <li>ManagementRoleResourceRoleResultSet</li>\r\n <li>ManagementRoleResourceRoleView</li>\r\n <li>ManagementRoleResourceTypeRoleLocationResultSet</li>\r\n <li>ManagementRoleRTRPRResource</li>\r\n <li>ManagementRolesAPI</li>\r\n <li>ManagementRolesAPI.CheckAssignmentStatus</li>\r\n <li>ManagementRolesAPI.GetAllAssigned</li>\r\n <li>ManagementRolesAPI.GetAllAssignedByManagementRoleId</li>\r\n <li>ManagementRolesAPI.GetAllAssignedByOrgRoleOrgZoneId</li>\r\n <li>ManagementRolesAPI.GetManagementRoles</li>\r\n <li>ManagementRolesAPI.GetSingleManagementRole</li>\r\n <li>ManagementRolesAPI.GetSuggestedManagementRolesByAssigneeId</li>\r\n <li>ManagementRolesAPI.OwnersByManagementRoleId</li>\r\n <li>ManagementRolesData</li>\r\n <li>ManagementRolesData.GetAnonymousInfo</li>\r\n <li>ManagementRolesData.GetManagementRolesByPersonGuid</li>\r\n <li>ManagementRolesData.GetUser</li>\r\n <li>ManagementRolesData.GetUserGroups</li>\r\n <li>ManagementRoleSearch</li>\r\n <li>ManagementRoleType</li>\r\n <li>ManagementRoleView</li>\r\n <li>PersonManagementRoleView</li>\r\n <li>ResourceAttestationView</li>\r\n <li>VisibilityRBACObjectAssignmentView</li>\r\n <p><a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Web Services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
VIS-Groups-Security-MyOrg
Visibility (VIS)
Grants access to see all security groups in the person’s organizations. The role specifically grants access to the following user interface controls and web services:
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Group Assignee Type menu option</li>\r\n </ul>\r\n </div>\r\n\r\n\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>GroupsAPI.CheckAssignmentStatus</li>\r\n <li>GroupOwnerAccountView</li>\r\n <li>AssigneeEligibleAssignmentExclusionView</li>\r\n <li>GroupsAPI.GetAssignedMembershipByAssigneeId</li>\r\n <li>AccessRequestPolicyView</li>\r\n <li>GroupMemberGroupView</li>\r\n <li>GroupUsageType</li>\r\n <li>GroupDeleted</li>\r\n <li>GroupResourceRoleResultSet</li>\r\n <li>GroupsAPI.GetUserGroups</li>\r\n <li>GroupsAPI.GetOwnersAndApprovers</li>\r\n <li>GroupsAPI.GetUser</li>\r\n <li>GroupsAPI.GetGroups</li>\r\n <li>RequestWorkflowView</li>\r\n <li>GroupsAPI</li>\r\n <li>ListDataItemView</li>\r\n <li>ResourceAttestationView</li>\r\n <li>AssigneeView</li>\r\n <li>GroupsAPI.GetAnonymousInfo</li>\r\n <li>GroupOwnerAccountHistoryView</li>\r\n <li>GroupsAPI.GetTargetSystemFilterdata</li>\r\n <li>GroupSearch</li>\r\n <li>VisibilityRBACObjectAssignmentView</li>\r\n <li>GroupsAPI.GetAssignedAppRolesByPersonGUID</li>\r\n <li>GroupAccountView</li>\r\n <li>GroupAccountFull</li>\r\n <li>EligibilityType</li>\r\n <li>ResourceEntitlementAssigneeResultSet</li>\r\n <li>AssigneeEligibleAssignmentView</li>\r\n <li>GroupsAPI.ApproversByAppRoleId</li>\r\n <li>GroupType</li>\r\n <li>GroupsAPI.GetSingleOrgRole</li>\r\n <li>GroupsAPI.GetAssignedMembershipByOrgRoleOrgZoneID</li>\r\n <li>GroupView</li>\r\n <li>GroupAccountHistoryView</li>\r\n <li>GroupsAPI.GetSuggestedAppRolesByOrgRoleIdOrgZoneId</li>\r\n <li>EmpowerIDStatOrganizationView</li>\r\n <li>GroupsAPI.GetSuggestedAppRolesByAssigneeId</li>\r\n <p><a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Web Services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
VIS-Groups-Distribution-MyOrg
Visibility (VIS)
Grants access to see all distribution groups in the person’s organizations. The role specifically grants access to the following user interface controls and web services: 
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Group Assignee Type menu option</li>\r\n </ul>\r\n </div>\r\n\r\n\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>GroupsAPI.CheckAssignmentStatus</li>\r\n <li>GroupOwnerAccountView</li>\r\n <li>AssigneeEligibleAssignmentExclusionView</li>\r\n <li>GroupsAPI.GetAssignedMembershipByAssigneeId</li>\r\n <li>AccessRequestPolicyView</li>\r\n <li>GroupMemberGroupView</li>\r\n <li>GroupUsageType</li>\r\n <li>GroupDeleted</li>\r\n <li>GroupResourceRoleResultSet</li>\r\n <li>GroupsAPI.GetUserGroups</li>\r\n <li>GroupsAPI.GetOwnersAndApprovers</li>\r\n <li>GroupsAPI.GetUser</li>\r\n <li>GroupsAPI.GetGroups</li>\r\n <li>RequestWorkflowView</li>\r\n <li>GroupsAPI</li>\r\n <li>ListDataItemView</li>\r\n <li>ResourceAttestationView</li>\r\n <li>AssigneeView</li>\r\n <li>GroupsAPI.GetAnonymousInfo</li>\r\n <li>GroupOwnerAccountHistoryView</li>\r\n <li>GroupsAPI.GetTargetSystemFilterdata</li>\r\n <li>GroupSearch</li>\r\n <li>VisibilityRBACObjectAssignmentView</li>\r\n <li>GroupsAPI.GetAssignedAppRolesByPersonGUID</li>\r\n <li>GroupAccountView</li>\r\n <li>GroupAccountFull</li>\r\n <li>EligibilityType</li>\r\n <li>ResourceEntitlementAssigneeResultSet</li>\r\n <li>AssigneeEligibleAssignmentView</li>\r\n <li>GroupsAPI.ApproversByAppRoleId</li>\r\n <li>GroupType</li>\r\n <li>GroupsAPI.GetSingleOrgRole</li>\r\n <li>GroupsAPI.GetAssignedMembershipByOrgRoleOrgZoneID</li>\r\n <li>GroupView</li>\r\n <li>GroupAccountHistoryView</li>\r\n <li>GroupsAPI.GetSuggestedAppRolesByOrgRoleIdOrgZoneId</li>\r\n <li>EmpowerIDStatOrganizationView</li>\r\n <li>GroupsAPI.GetSuggestedAppRolesByAssigneeId</li>\r\n <p><a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Web Services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
VIS-Groups-Generic-MyOrg
Visibility (VIS)
Grants access to see all generic groups in the person’s organizations. The role specifically grants access to the following user interface controls and web services: 
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Group Assignee Type menu option</li>\r\n </ul>\r\n </div>\r\n\r\n\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>GroupsAPI.CheckAssignmentStatus</li>\r\n <li>GroupOwnerAccountView</li>\r\n <li>AssigneeEligibleAssignmentExclusionView</li>\r\n <li>GroupsAPI.GetAssignedMembershipByAssigneeId</li>\r\n <li>AccessRequestPolicyView</li>\r\n <li>GroupMemberGroupView</li>\r\n <li>GroupUsageType</li>\r\n <li>GroupDeleted</li>\r\n <li>GroupResourceRoleResultSet</li>\r\n <li>GroupsAPI.GetUserGroups</li>\r\n <li>GroupsAPI.GetOwnersAndApprovers</li>\r\n <li>GroupsAPI.GetUser</li>\r\n <li>GroupsAPI.GetGroups</li>\r\n <li>RequestWorkflowView</li>\r\n <li>GroupsAPI</li>\r\n <li>ListDataItemView</li>\r\n <li>ResourceAttestationView</li>\r\n <li>AssigneeView</li>\r\n <li>GroupsAPI.GetAnonymousInfo</li>\r\n <li>GroupOwnerAccountHistoryView</li>\r\n <li>GroupsAPI.GetTargetSystemFilterdata</li>\r\n <li>GroupSearch</li>\r\n <li>VisibilityRBACObjectAssignmentView</li>\r\n <li>GroupsAPI.GetAssignedAppRolesByPersonGUID</li>\r\n <li>GroupAccountView</li>\r\n <li>GroupAccountFull</li>\r\n <li>EligibilityType</li>\r\n <li>ResourceEntitlementAssigneeResultSet</li>\r\n <li>AssigneeEligibleAssignmentView</li>\r\n <li>GroupsAPI.ApproversByAppRoleId</li>\r\n <li>GroupType</li>\r\n <li>GroupsAPI.GetSingleOrgRole</li>\r\n <li>GroupsAPI.GetAssignedMembershipByOrgRoleOrgZoneID</li>\r\n <li>GroupView</li>\r\n <li>GroupAccountHistoryView</li>\r\n <li>GroupsAPI.GetSuggestedAppRolesByOrgRoleIdOrgZoneId</li>\r\n <li>EmpowerIDStatOrganizationView</li>\r\n <li>GroupsAPI.GetSuggestedAppRolesByAssigneeId</li>\r\n <p><a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Web Services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
VIS-BusinessRole-Partner
Visibility (VIS)
Grants access to see all partner Business Roles. The role specifically grants access to the following user interface controls and web services: 
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n <ul class=\"nav nav-pills mb-3\" id=\"pills-tab\" role=\"tablist\">\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link active\" id=\"pills-first-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab1\" type=\"button\" role=\"tab\">User Interface Controls</button>\r\n </li>\r\n <li class=\"nav-item\" role=\"presentation\">\r\n <button class=\"nav-link\" id=\"pills-second-tab\" data-bs-toggle=\"pill\" data-bs-target=\"#tab2\" type=\"button\" role=\"tab\">Web Services</button>\r\n </li>\r\n</ul>\r\n<div class=\"tab-content\" id=\"pills-tabContent\">\r\n <div class=\"tab-pane fade show active\" id=\"tab1\" role=\"tabpanel\">\r\n <p>Grants <b>Viewer</b> access for the following controls\r\n <a href=\"#controlsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Controls\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"controlsCollapse\" class=\"collapse\">\r\n <li>Business Role Assignee Type</li>\r\n </ul>\r\n </div>\r\n\r\n\r\n <div class=\"tab-pane fade show\" id=\"tab2\" role=\"tabpanel\">\r\n <p>Grants <b>Executor</b> access for the following web services\r\n <a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show and Hide Services\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a></p>\r\n <ul id=\"servicesCollapse\" class=\"collapse\">\r\n <li>BusinessRolesAPI</li>\r\n <li>BusinessRolesAPI.CheckAssignmentStatus</li>\r\n <li>BusinessRolesAPI.ExecuteMethod</li>\r\n <li>BusinessRolesAPI.GetAnonymousInfo</li>\r\n <li>BusinessRolesAPI.GetApplicationRoleTemplates</li>\r\n <li>BusinessRolesAPI.GetAssignedAppRolesByPersonGUID</li>\r\n <li>BusinessRolesAPI.GetAssignedBusinessRolesByPersonGUID</li>\r\n <li>BusinessRolesAPI.GetOrgRole</li>\r\n <li>BusinessRolesAPI.GetOrgRoles</li>\r\n <li>BusinessRolesAPI.GetSingleOrgRole</li>\r\n <li>BusinessRolesAPI.GetUser</li>\r\n <li>BusinessRolesAPI.GetUserGroups</li>\r\n <li>OrgRoleOrgZone</li>\r\n <li>OrgRoleOrgZoneView</li>\r\n <li>OrgRoleType</li>\r\n <li>OrgRoleUsageType</li>\r\n <li>OrgRoleView</li>\r\n <p><a href=\"#servicesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Web Services\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
ACT-Person-Profile-Self-Service
Activity (ACT)
Grants users access to operations needed to edit their profiles.
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n \r\n <p>View Operations\r\n <a href=\"#operationsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show Operations\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"operationsCollapse\" class=\"collapse\">\r\n <li>Edit Address</li>\r\n <li>Edit Disable Notifications</li>\r\n <li>Edit IsOutOfOffice</li>\r\n <li>Edit Person Demographics</li>\r\n <li>Edit Person GlobalTimeZoneId</li>\r\n <li>Edit Person Name Attributes</li>\r\n <li>Edit Person OutOfOffice Settings</li>\r\n <li>Edit Person Photo</li>\r\n <li>Edit Phone Numbers</li>\r\n \r\n <p><a href=\"#operationsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Operations\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
ACT-Person-MFA-Self-Service
Activity (ACT)
Grants users access to operations needed to edit their MFA options.
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n \r\n <p>View Operations\r\n <a href=\"#operationsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show Operations\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"operationsCollapse\" class=\"collapse\">\r\n <li>AddRemovePersonMultiFactorAuthType</li>\r\n <li>Clear Person Communication Types</li>\r\n <li>Create Asset</li>\r\n <li>Create Oath Token</li>\r\n <li>Edit Require Second Factor</li>\r\n <li>EditPersonMultiFactorAuthType</li>\r\n <li>Remove Person Communication Type</li>\r\n <li>RemovePersonMultiFactorAuthType</li>\r\n <p><a href=\"#operationsCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Operations\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
Password-Self-Service
Role Bundle
Grants users access to perform password self-service. This role bundle grants access to the following additional Management Roles:
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n \r\n <p>View Roles\r\n <a href=\"#rolesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show Roles\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"rolesCollapse\" class=\"collapse\">\r\n <li>UI-Person-Password-Self-Service - Grants access to change password, enroll and other password self-service workflows and user interfaces</li>\r\n <li>UI-MyIdentity-Full - Provides access to all pages and controls in My Identity Microservice app</li>\r\n <li>UI-Person-Multi-Factor-Authentication-Self-Service - Provides access to the UI and workflows needed to perform MFA self-service activities</li>\r\n <li>VIS-Accounts-MyAccounts - The person can view all acounts joined to their EmpowerID Person object</li>\r\n <li>VIS-Person-Self - The person can view only themselves</li>\r\n <li>ACT-Person-MFA-Self-Service - Provides access to multi-factor self-service operations</li>\r\n <li>ACT-Person-Password-Self-Service - Provides access to change password, enroll and other password self-service operations</li>\r\n <p><a href=\"#rolesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Roles\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}
IAM Shop, My Tasks, and My Identity Self-Service Basic Access
Role Bundle
Grants access for the UI to use the IAM Shop, My Tasks, My Identity microservices but does not grant visibility to objects or the UI- roles for each resource type. This may be added separately as needed.
This role bundle grants access to the following additional Management Roles:
 Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<style>\r\n.nav {\r\n border: 1px solid #C1C1C8;\r\n border-style: none none solid none;\r\n padding: 0;\r\n margin: 12px 0 32px;\r\n display: flex;\r\n flex-wrap: nowrap;\r\n overflow: auto;\r\n}\r\n .nav-link {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n}\r\n.nav-link.active {\r\n background: transparent !important;\r\n color: #1D1D21 !important;\r\n border-bottom: 2px solid #1662DD !important;\r\n border-radius: 0px !important;\r\n}\r\n</style>\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n \r\n <p>View Roles\r\n <a href=\"#rolesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Show Roles\" class=\"fa-duotone fa-square-down-right\"></i>\r\n </a>\r\n </p>\r\n <ul id=\"rolesCollapse\" class=\"collapse\">\r\n <li>UI-MyTasks-Participant-Full - Provides access to all pages in Mytasks (approver, requestors as well as view all tasks and requests). All tasks and requests follows the visibility restriction for the person.</li>\r\n <li>UI-MyTasks-Collab-Tasks-Full - Provides access to Collaboration Tasks page and controls for My tasks microservice</li>\r\n <li>UI-MyIdentity-Full - Provides access to all pages and controls in My Identity Microservice app.</li>\r\n <li>UI-IT-Shop-MS-Risk - Provides access to risk features in the IAM Shop.</li>\r\n <li>ACT-Person-SetAsApprover-All - Allows a person to assign a business request/task to anyone.</li>\r\n <li>ACT-Person-Delegate-All - Provides access to delegate to anyone for permanent delegations.</li>\r\n <p><a href=\"#rolesCollapse\"data-bs-toggle=\"collapse\">\r\n <i title=\"Hide Roles\" class=\"fa-duotone fa-square-up-right\"></i>\r\n </a></p>\r\n </ul>\r\n </div>\r\n</div>","javascript":"$(document).ready(function () {\r\n $('.glyphicon').click(function () {\r\n $(this).toggleClass(\"glyphicon-chevron-right\").toggleClass(\"glyphicon-chevron-up\");\r\n });\r\n});","css":".expand-button {\r\n position: relative;\r\n }\r\n\r\n .accordion-toggle .expand-button:after\r\n {\r\n position: absolute;\r\n left:.75rem;\r\n top: 50%;\r\n transform: translate(0, -50%);\r\n content: '-';\r\n }\r\n .accordion-toggle.collapsed .expand-button:after\r\n {\r\n content: '+';\r\n }\r\n \r\n .glyphicon.glyphicon-chevron-right{\r\n font-weight:100;\r\n}"}