Eligibility rules allow you to restrict who can and cannot see and shop for IT resources that you have enabled for the IAM Shop. Users added as eligible assignees for specific resources can shop for those objects in the IAM Shop.
Procedure
On the navbar, expand Privileged Access and select Computers.
Select the Computers tab and then search for the computer you want to configure eligibility for.
Click the Display Name link for the computer.
This action opens the View One page for the computer. View One pages are designed to facilitate the viewing and management of the corresponding objects in EmpowerID.
Click the Eligibility subtab.
You should see the following two eligibility accordions:Who is Eligible to Request (As Resource) – Allows you to specify who is eligible to request access to the computer, as well as their eligibility type.
Who is Excluded from Requesting (As Resource) – Allows you to explicitly specify who is not eligible to shop for the computer
Expand the Who is Eligible to Request (As Resource) accordion and do the following to give users the ability to shop for access to the computer:
Click the Add button in the grid header.
Fill in the fields of the Assignment Information pane:
Eligibility Type – Select Eligible, PreApproved, or Suggested.
Which Type of Assignee for this Policy – Search for and select the EmpowerID actor type for which you are granting eligibility. For example, if you want to grant eligibility to all members of a specific group, you select Group as the assignee type.
Select <Assignee> Name to Search – Search for and select the specific assignee eligible for access to the Management Role. The assignee must match the assignee type, or it will not appear when searching. For example, if you select Group as the assignee type, you can only search for groups.
After entering your information, click Save.
Repeat the above steps for any other eligibility assignments desired.
Click Submit when ready.