EmpowerID restricts access to Computer operations through the use of Management Roles. To work with computers, users must be assigned to the appropriate roles. Management Roles are prefixed by their function in EmpowerID and include the following:
UI – Management Roles prefixed with UI grant users access to specific UI elements in the EmpowerID Web interface. An example of this type of role for computes is UI-Computer-Object-Administration. This role grants users access to the user interfaces and workflows for managing computer objects.
VIS – Management Roles prefixed with VIS grant users the ability to see specific objects in EmpowerID. An example of this type of role for computers is VIS-Computer-All. This role grants users access to see all computer objects in EmpowerID.
ACT – Management Roles prefixed with ACT grant users the ability to manage specific objects in EmpowerID. An example of this type of role for computers is ACT-Computer-Object-Administration-All. This role grants users the ability to create, update, and delete all computer objects in the system.
Roles needed to manage computers
The following Management Role assignments grant users the ability to manage computers in EmpowerID.
Management Role | Access Granted by Management Role | Role Type |
|---|---|---|
ACT-Computer-Object-Administration-All | Grants access to create, update, and delete all computer objects. | Activity (ACT) |
ACT-Computer-Object-Administration-MyOrg | Grants access to create, update, and delete computer objects in a person’s organization. | Activity (ACT) |
ACT-Computer-Object-Administration-MyLocations | Grants access to create, update, and delete computer objects in a person’s locations. | Activity (ACT) |
UI-Computer-Object-Administration | Grants access to the user interfaces and workflows for managing computer objects. | Feature Set (UI) |
VIS-Computer-All | Grants access to see all computers. | Visibility (VIS) |
VIS-Computer-MyOrg | Grants access to see all computers in a person’s organization. | Visibility (VIS) |
VIS-Computer-MyLocations | Grants access to see all computers in a person’s locations. | Visibility (VIS) |