Access Management | EmpowerID IGA Documentation

Access Management

EmpowerID controls computer operations access through a hierarchical Management Role system. Users require specific role assignments, categorized into three types: UI roles marked with 'UI' that grant access to interface elements, VIS roles marked with 'VIS' that provide visibility to objects, and ACT roles marked with 'ACT' that enable management capabilities for computer objects. These articles guide you through understanding and implementing Management Roles for effective access control, as well as configuring eligibility rules to determine which users can access specific computers.

📄️ Access Needed to Manage Computers

EmpowerID restricts access to Computer operations through the use of Management Roles. To work with computers, users must be assigned to the appropriate roles. Management Roles are prefixed by their function in EmpowerID and include the following:

📄️ Grant Access to Manage Specific Computers

In EmpowerID, access to resources is granted through the assignment of Access Levels. Access Levels consist of one or more "EmpowerID Operations" and/or "native system rights," which are specific to a particular resource type. By assigning an Access Level to an EmpowerID actor, you enable the actor to execute the associated operations and rights on the specified resources. This article provides a step-by-step guide on how to assign these.

📄️ Configure Eligibility for Computers

Eligibility rules allow you to restrict who can and cannot see and shop for IT resources that you have enabled for the IAM Shop. Users added as eligible assignees for specific resources can shop for those objects in the IAM Shop.

🗃️ IAM Shop Permission Levels

4 items