Skip to main content

Manage Resource Access for Management Roles

Management Roles grant members access to applications, groups, systems, and other resources. Use this procedure to add, remove, or modify resource access assignments for a role, including time constraints that control when access is active.

Prerequisites​

Before managing resource access, ensure you have:

  • Access to Resource Admin with permissions to manage the target Management Role

Procedure​

  1. Navigate to Resource Admin and select Management Roles from the Resource dropdown menu. Select Management Roles
  2. Locate the Management Role you want to modify and click the Details button. Management Role Details button
  3. From the role menu on the left, select RBAC Assignments. Management Role Overview Page

Add New Resource Access​

  1. Click Add New Access Assignment to grant the role access to additional resources. Add New Access Assignment workflow

  2. Configure the Which Type of Access section:

    • Assign Direct to Resource or Other Method - Select how access is scoped (Direct, By Location, Relative, Belonging to which group/Management Role/Query-Based Collection)
    • Resource Type - Select the resource type (e.g., Group, Application, System Account)
    • Access Level - Select the permission level (e.g., Access Manager, Member, Viewer)

  3. Complete the Where: Select Resources or a Location section:

    • Enter the resource or location name in the search field and click Search
    • Review the results and check the box next to each resource you want to assign
    • Use pagination controls to browse multiple pages if needed

  4. Complete the Why & for How Long? section:

    • Comment or Justification - Enter a business justification (optional but recommended)
    • Access Starts - Leave blank for immediate access, or select a start date and time for scheduled activation
    • Access Ends - Leave blank for permanent access, or select an end date and time for temporary access

  5. Click Add to include this assignment in your request.

  6. To add multiple assignments, repeat steps 1-5. Each assignment accumulates in the Request Summary.

  7. Review the Request Summary to verify all assignments are correct and click Submit.

Remove Resource Access​

Remove Individual Assignments:

  1. Locate the assignment you want to remove in the assignments list.
  2. Click Delete next to the assignment.
  3. Review the confirmation dialog and click Confirm to permanently remove the access assignment. Delete confirmation dialog

Remove Multiple Assignments:

  1. Check the box next to each assignment you want to remove.
  2. Click Remove X Access Granted (where X is the number selected) and confirm the bulk removal. Remove multiple assignments

Add or Modify Time Constraints​

  1. Locate the assignment in the assignments list and click Add Time Constraint. Time Constraint dialog
  2. Configure time restrictions:
    • Check Temporary Access (GMT/UTC Time) to enable time constraints
    • Access Begins - Click the field and select a start date and time
    • Access Ends - Click the field and select an end date and time Time Constraint date picker
  3. Click Save to add the constraint to your cart.
  4. Click the cart icon in the top navigation. Resource Admin cart
  5. For each constraint in your cart:
    • Select a justification from the dropdown or choose "Other Justification"
    • Add a comment explaining the constraint (minimum 25 characters for "Other")
    • Enter a Business Request Name to identify the request
  6. Click Submit to finalize all time constraint adjustments.

Verify the Results​

After submitting changes:

  1. Review the assignments list on the RBAC Assignments page to confirm additions or removals.
  2. Verify that time constraints appear correctly on applicable assignments.

Note that access assignment changes take effect immediately. All current and future members of the Management Role gain or lose access to resources based on the assignments, and time-constrained assignments automatically activate and expire according to configured schedules.