You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.
Assign Access Levels to Management Role Definitions
After you Create Management Role Definitions, the next step is to add Access Levels to it. In this way, when you create a child Management Role from the definition, that role will have an initial amount of access assigned to it. Without Access Levels, a Management Role Definition is a blank container. You can still use it as a base template for creating Management Roles, but those Management Roles will not grant any initial access to resources.
Although you can add also Access Levels to child Management Roles, adding as many as possible to a Management Role Definition before creating any child Management Roles allows you to build a consistent framework for general resource allocation based on user roles. Once you have added Access Level Assignments to a Management Role Definition, you can tailor child Management Roles with additional Resource Roles to meet the needs of your organization.
Assign Access Levels
On the navbar, expand Role Management and select Management Roles.
Select the Role Definitions tab and search for the role definition to which you want to assign Access Levels.Â
Click the Display Name link for the definition.
This directs you to the View One page for the role definition. View One pages allow you to view and manage the objects to which they pertain.Â
On the View One page, expand the Access Assignments accordion.
Click the Add button.
Â
This opens the Grant Actor Access page. You use this page to select and scope the Access Levels you are assigning.
Â
In the Which Type of Access panel of the page, do the following:
Assign Direct to Resource or Other Method — Select the type of assignment
Direct — Select this option if you want to assign access to a specific resource, such as a single group
By Location — Select this option if you want to assign access to all resources in a specific location (and below if the location has child locations), such as all groups in Boston
Relative — Select this option if you want to assign access to all resources relative to members of the BRL, such as all groups in a person’s locations
Belonging to which group — Select this option if you want to assign access to all users and people who are members of the selected group(s)
Belonging to which Management Role — Select this option if you want to assign access to all people who are members of the selected Management Role(s)
Belonging to which Query-Based Collection — Select this option if you want to assign access to all objects belonging to the Query-Based Collection
Resource Type — Select the resource type for which you are assigning access, such as Group (Security)
Access Level — Select the Access Level you are assigning, such as Member
In the Where: Select Resources or a Location panel, search for and select the target resource(s) or the target location (for By Location assignments)
In the Why & for How Long? panel, do the following:
Comment or Justification — Enter a comment about the assignment; optional
Access Starts — Click the field and select a start date and time from the calendar; if a start date is not selected, access begins immediately
Access Ends — Click the field and select an end date and time from the calendar; if an end date is not selected, access continues perpetually
Click Add.
Repeat steps 6 through 8 for each assignment you want to make.
When ready to commit your changes, click Submit.