IAM Shop Permission Levels in EmpowerID are designed to represent permissions for specific resources in within native systems, such as including shared folders, mailboxes, and computers. Organizations can configure these These permission levels can be configured by organizations to grant particular specific permissions to resources, like various resources. Examples of this might include setting a "read-only" access level for a shared folder or assigning "local admin" access for to a computer.
When users request access from the IAM Shop to a resource that has been configured with IAM Shop Permission Levels, they have are given the option to choose select a permission level, as illustrated . This process is demonstrated in the image below.
In this example, the user sees two permission levels for a computer: "Local Admin" and "Domain Admin." Each of these levels is mapped to a specific group in the native system that grants the corresponding permissions. For instance, if a user selects the IAM Shop Permission Level named "Local Admin," EmpowerID fulfills the request by adding the user to the group granting local admin rights on the computer.
...