Directly assigning individuals to management roles provides them with immediate access to all the resources and permissions associated with those roles, distinct from access granted by other Role-Based Access Control (RBAC) assignments. These direct assignments offer a way to grant specialized access to specific resources, bypassing the hierarchy of other role assignments. You can easily add a person as a direct member of a management role from the IAM user interface by following the instructions below,
Add New People as Members.
Navigate to the portal for the Resource Admin app in your environment.
In Resource Admin, select Management Role from the dropdown at the top of the page. You will be directed to the View All page for management roles.
To search for a management role, simply enter the job title in the search box and click Enter. To narrow down your search, you can use the filters on the left sidebar, including Applications, Location, Business Function, and other options.
Click the Friendly Name link or Details button for the management role. You will be navigated to the details page for the management role.
To view a member's direct assignments, select the "People as Members" tab and enter the person's name in the search box. Make sure to click the "Direct" radio button.
To add new members, click on the "Add New People as Members" button.
In the modal popup, type in the search text box to find the person you wish to add and select them from the search results. To add them to the selected people list, click on the "Add" button.
If you wish to assign them a time-based membership, select "Set Duration" and provide the start and end date time.
To include more people, simply follow the same procedure of entering the name in the search bar and choosing them from the results. Once you have selected them, click on the "Add" button to add them to the list of selected people.
After selecting the people, click on "Add New People as Members."
You will receive a notification indicating the status of your cart submission.
Click on the Shopping Cart 🛒 icon on the top of the page to create a business request.
Provide the reason and additional details for the business request. Click on Submit to create the request.
A request for business has been initiated and needs approval from an authorized approver in the "My Tasks" interface. Once approved, individuals will be assigned directly to the management role. For more guidance on responding to business requests, please refer to the detailed documentation.
To verify that an individual has been assigned to the management position, revisit the role details and select the "People as Members" tab. Then, locate the newly added person.
For detailed instructions on how to navigate the IAM shop interface, submit business requests, and respond to tasks, please refer to the documentation provided here.