Getting Started › Role-Based Entitlements › Access Roles

Access Roles

Access roles provide an additional way to provide entitlements in CA Identity Manager or another application. For example, you can use access roles to accomplish the following:

• Provide indirect access to a user attribute
• Create complex expressions
• Set an attribute in a user profile, which is used by another application to determine entitlements

Access roles are similar to identity policies in that they apply a set of business changes to a user or group of users. However, when you use an access role to apply business changes, you can see which users the changes apply to by viewing the members of the access role.

In most cases, access roles are not associated with tasks.

Note: When CA Identity Manager integrates with CA SiteMinder, access roles can also provide access to applications that are protected by CA SiteMinder. In this case, access roles do include access tasks. For more information, see the chapter on SiteMinder integration in the Configuration Guide.