Map Global Functions

Owned by
Phillip Hanegan
Last updated: Feb 03, 2022

In and of themselves, functions are nothing more than empty containers that represent actions that users could do within your IT environment. To have use, they must be mapped to specific rights and roles either created in EmpowerID or inventoried from connected applications, such as SAP. In EmpowerID, this is known as adding “function mapping rules” to functions. Function mapping occurs first at the global function level and then at the local function level.

How to map rights and roles to global functions

  1. On the navbar, expand Compliance and click Risk Management.

  2. On the Risk Management page, select the Global Functions tab and then search for the function to which you want to map inventoried rights or roles.

  3. Click the Name link for the global function.


    This opens the View One page for the global function. This page allows you to view and manage the function as needed.

     

  4. On the View One page, select the Function Mapping Rules tab and then expand the accordion relative to what you want to map.

    • Global Rights Granting Function (Mapped) – This accordion allows you to search for and select one or more rights that you want to map to the function. Examples of rights could be inventoried Azure rights or rights you create in EmpowerID for applications designated as PBAC apps.

    • Global Roles Granting Function (Mapped) – This accordion allows you to search for and select one or more roles that you want to map to the function. Examples of roles could be inventoried Azure global roles or roles you create in EmpowerID.

  5. Search for and select the rights and roles you want to map to the function. In the below example, we select the Groups Administrator role.

     

  6. Click Submit.

 

Related