Previous Topic: Define Owner Rules for an Admin RoleNext Topic: Verify an Admin Role


Allow Users to Self-Assign Roles

Users can assign certain roles to themselves. For example, you may want to allow users to sign up for the Delegation Manager role so that they can delegate the work items of one user to another user.

To control the roles that users can assign to themselves, you configure criteria in the Roles Self-Manager task.

Follow these steps:

  1. Modify the Roles Self-Manager task as follows:
    1. Select Roles and Tasks, Modify Admin Task, and search for the Roles Self-Manager task.
    2. Select the Tabs tab.

      CA Identity Manager displays the list of tabs that apply to the task.

    3. Select the right arrow icon next to the Roles Self Manager tab to edit it.
    4. Complete the following fields:

      Show only Admin Roles Meeting the Following Rules

      Specifies the criteria that CA Identity Manager uses to determine which roles to allow users to assign to themselves.

      To add additional rules, click the plus (+) icon.

      User to be used as Admin Role Administrator

      Specifies the administrator for roles that users can assign to themselves.

      The roles that users can assign to themselves must have the user you select in this field as an administrator and meet the criteria you specified in the Show Only Admin Roles Meeting the Following Rules field.

      List Screen

      Specifies the columns and format for the list of roles that a user can select to self-assign a role.

    5. Click OK, then click Submit.
  2. Add the Roles Self-Manager task to a role, and assign that role to users who should have this capability.

More information:

Select Admin Tasks for the Role

User-defined Custom Attributes for Roles