Assigning Access Levels to Management Role Definitions

After a Management Role Definition has been created, it needs to have Access Levels added to it before any child Management Roles you create from it can be used to grant assignees of those child Management Roles access to resources. Without Access Levels, a Management Role Definition is simply an blank container. It can still be used as a base template for creating Management Roles, however, those Management Roles will not convey any access to resources until Resource Role Assignments are added to them. Although you can add Access Levels to a child Management Role at any time, adding as many as possible to a Management Role Definition before creating any child Management Roles allows you to build a consistent framework for general resource allocation based on user roles. Once Access Level Assignments have been added to a Management Role Definition, you can quickly tailor any child Management Roles with additional Resource Roles to meet the needs of your organization.

To assign resources to a Management Role Definition

  1. From the Navigation Sidebar of the EmpowerID Web interface, navigate to the Delegations Management page by expanding Identities and clicking Manage Delegations.
  2. Select the Actor Delegations tab.
  3. Select Management Role Definition from the Assignee Type drop-down, type the name of the Management Role Definition to which you are delegating access in the Enter a Management Role Definition Name to Search field and then click the tile for that Management Role Definition.
  4. Select Direct from the Assignment Type drop-down.
  5. From the Assignments grid, click the Add Assignments (+) button.
  6. In the Grant Access dialog that appears, do the following:
    1. Select the resource type for which you want to give the Management Role Definition an access level. In our example, we are selecting the Workflow resource type.
    2. Type the name of the specific resource in the Enter a <Resource Type> Name to Search field and then click the tile for that resource. In our example, we are selecting the Enable Computer workflow.
    3. The actual name of this field changes to reflect the resource type selected from the Resource Type drop-down. Because we selected Workflow as the resource type, the name of the field in our example is Enter a Workflow Name to Search.
    4. Select the Access Level you want to assign to the Management Role Definition from the Access Level drop-down. In our example, we have selected the Initiator Access Level.
    5. Optionally, tick Time Constraint if you want to add a time constraint to the Access Level assignment. When this option is selected, you set the date and time ranges by clicking in the Valid From and Valid To fields and picking the appropriate values from the Calendar.
    6. Additionally, you can restrict the access to certain days and hours of the week by clicking the Hours of the Day Allowed drop-down button and setting the restrictions in the from and to fields for each day.

    7. Click Save.
    8. This adds the Access Level assignment to the Shopping Cart.

  7. Repeat step 6 for each Access Level you want to assign to the Management Role Definition.
  8. When you have completed adding Access Level assignments, click the Shopping Cart icon, type a reason for the assignments in the cart dialog and then click Submit.