Assigning Resource Owners

Owned by Universal Importer for Confluence
Last updated: Jun 20, 2018 by Kim Landis (Unlicensed)
3 min read

Home / Identity Administration / Access Assignments / Current: Assigning Resource Owners


When users shop for any resources for which they do not have the delegations to claim, EmpowerID creates a task for each of their requests and routes those tasks to all users with the ability to approve them. In EmpowerID, these "approvers" are known as "resource owners" and comprise all users who have the Access Manager Access Level for the specific resource being requested.

For example, if a user requests membership in a group that is available from the IT Shop—and the group does not allow for automatic group joining—EmpowerID sends the request to each person who is an Access Manager or owner of the group. Any one of those people can then decide whether to approve or deny the membership. This principal applies to all resource types protected by EmpowerID.

To assign resource owners

  1. In the Navigation Sidebar of the EmpowerID Web interface, expand Admin, then Identities, and click Manage Delegations.
  2. From the Manage Delegations page, click the Resource Delegations tab.

    This opens a form that allows you to do the following:
    1. Select a resource type, such as a security group, an Exchange mailbox or an asset request, etc.
    2. Specify the specific resource belonging to the resource type, such as the BK-GVR01 security group, the administrator mailbox, or the Mobile Phone asset request, etc.
    3. Select the type of EmpowerID Actor to assign the access.
    4. Search for and select specific actor belonging to the type. For example, if you select Person as the type of actor, then you would search for and select each person who is to be the resource owner.



  3. From the Resource Delegations tab, select the appropriate resource type from the Resource Type drop-down.

  4. Type the name of the specific resource for that resource type in the Enter a Name to Search field and then click the tile for the resource.

    Please note that the label for the field dynamically updates to reflect the selected resource type. Thus, if you selected Group (Security) as the resource type, the label would read Enter a Group (Security) Name to Search.

  5. Click the Add Assignee (plus) button on the grid.



  6. In the Assignee dialog that appears, do the following:
    1. Type the name of the specific actor in the Enter Name to Search field and then click the tile for that actor.
    2. Select Access Manager from the Access Level drop-down.

    3. Optionally, limit the time and dates of the access assignment as needed.

7. Click Save.