Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Excerpt
nameAppRoleFields

Field

Description

Example

Name

Name of the app role

Report Writer

Allowed Member Types

Specifies whether the app role can be assigned. Options include:

  • Default

  • Users/Groups

  • Applications

  • Both (Users/Groups) + Applications

Users/Groups

Value

Specifies the value of the roles claim that the application should expect in the token

Report.Create

Description

Description of the app role

Writers can create reports

Application Role Requestable in IAM Shop

Specifies whether users can request the role in the IAM Shop

Select A Location

Select a location in EmpowerID for the application role. This location is for RBAC delegation only.
If there is a location selected by default and you wish to change it, click the link for the location and then search for and select the desired location from the Location tree.

EmpowerID Applications

Excerpt
nameAssignee Types

Assignee Type

Description

Business Role and Location

Select this assignee type when assigning to everyone in a Business Role and Location.

Group

Select this assignee type when assigning to everyone in a group.

Management Role

Select this assignee type when assigning to everyone in a Management Role.

Management Role Definition

Select this assignee type when assigning to each Management Role that has the definition as its parent. Each person in the child Management Roles receives access.

Person

Select this assignee type when assigning to a specific person.

Query Based Collection

Select this assignee type when assigning to everyone in the Query-Based Collection.

Excerpt
nameAppScopeFields

Field

Description

Example

Scope Name

Name of the scope

read.Calendar

Who Can Consent

Specifies the types of users who can consent to the scope. Options include:

  • Admins and Users – Select if users can consent to the scope

  • Admins Only – Select if higher privileges are required for consent

Admins and Users

Admin Consent Name

Name of the consent that appears to admins

Read Email Calendar

Admin Consent Description

Description of the consent that appears to admins

Application can read your Email Calendar

User Consent Display Name

Name of the consent that appears to users

Read Email Calendar

User Consent Description

Description of the consent that appears to users

Application can read your Email Calendar

Select A Location

Select a location in EmpowerID for the application role. This location is for RBAC delegation only.
If there is a location selected by default and you wish to change it, click the link for the location and then search for and select the desired location from the Location tree.

Image Removed

EmpowerID Applications