<!doctype html>
<html lang="en">
  <head>
    <!-- Required meta tags -->
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">

    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="https://docs.empowerid.com/homepage.css">

    <title>Access Assignments</title>
  </head>
  <body>
    <p>In EmpowerID, you manage access to IT resources through Access Level assignments. Access Levels are bundles of <a href="#" data-toggle="tooltip" data-placement"bottom" title="Operations are protected code objects that when executed within an EmpowerID workflow allows a resource within EmpowerID or a custom application to be accessed in a way that is consistent with the operation and the type of resource being accessed. Some examples include adding users to groups, creating mailboxes, updating user attributes or even viewing certain objects such as EmpowerID pages and reports.">EmpowerID Operations</a> and/or native system rights specific to resource types—such as Exchange mailboxes or user accounts—that when assigned to users give those users the ability to access IT resources in the manner specified by the Access Level. Each resource type has its own set of Access Levels defined with different combinations of EmpowerID operations and rights (where applicable) to ensure that the level of access to the resources remains consistent for the type and the assignment. These actions can range from simply viewing a resource in an EmpowerID user interface to provisioning and deprovisioning resources in native systems. The extent of the access is determined by the configuration of the Access Levels and the scope of the assignment.</p>

<p>EmpowerID provides a large library of Access Levels ready configured for most common resource types and delegation scenarios. You can use these out of the box as well as create your own. The topics in this section show you how to get started.</p>

    <!-- Optional JavaScript -->
    <!-- jQuery first, then Popper.js, then Bootstrap JS -->
    <script src="https://code.jquery.com/jquery-3.2.1.slim.min.js" integrity="sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpGFF93hXpG5KkN" crossorigin="anonymous" async></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39j7fakFPskvXusvfa0b4Q" crossorigin="anonymous" async></script>
    <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js" integrity="sha384-JZR6Spejh4U02d8jOt6vLEHfe/JQGiRRSQQxSfFWpi1MquVdAyjUar5+76PVCmYl" crossorigin="anonymous" async></script>
<script><body onload="myFunction()"></script>
<script>
function myFunction() {
    alert("Hello! I am an alert box!");
}
</script>
<script>
  </body>
</html>




For a more in-depth discussion of access in EmpowerID, see EmpowerID RBAC Overview and Access Levels Overview.





Getting Started










Access Assignment Types Overview

Overview of Access Assignment Types







Granting Direct Access to Resources

Granting Direct Access to Resources







Granting Access to Relative Resources

Granting Access to Relative Resources







Granting Access by Location

Granting Access by Location












Granting Access with RBAC Containers

Granting Access with RBAC Containers







Assigning Resource Owners

Assigning Resource Owners







Configuring Email Approvals

Configuring Email Approvals







Removing Access to Resources

Removing Access to Resources











Person Relative Access Levels

Person Relative Access Levels