Create IAM Shop Permission Levels

EmpowerID includes IAM Shop Permission Levels for shared folders, computers, and mailboxes that can be used to represent native permissions out of the box. However, you can create your own, naming them whatever makes sense for your environment. Once added to a resource, these custom permission levels will then appear to users shopping for those resources in the IAM Shop. This article demonstrates this by creating an IAM Shop Permission Level named “Power User” for computers.

Create IAM Shop Permission Levels

1. On the navbar, expand Admin > Miscellaneous and click IAM Shop Permission Levels.

2. Click the Add button.
   
   

   Open

   

   
   This opens the form for creating the new IAM Shop Permission Level.
   
   

   Open

   

    

3. Fill in the fields with the appropriate information.

   • Name – Enter the name of the permission level

   • Description – Enter the description of the permission level

   • Locale Key (Unique Name) – Enter a desired locale key or leave it empty to have EmpowerID generate a default key

   • Resource Type ID – Select the appropriate resource type for the permission level, such as computer

   • Localized Description Key – Enter a localized description or leave it empty

   • Command – Optional

   • Command Format – Optional

   • Generate IAM Shop Assignees – Optional

4. Click Save.
   
   

You should now see the IAM Shop Permission Level as an option when adding permission levels to the resources belonging to the resource type specified when you created the IAM Shop Permission Level. For example, in this article, we created an IAM Shop Permission Level named “Power User” for the Computer resource type. Thus, we should see “Power User” when selecting IAM Shop Permission Levels for computers, as shown in the below image.