Create, edit, or remove a role
Create a role
Go to Output > Roles.
Go to the Role Models tab.
Edit a role model for the current Development role model.
Click Add Role.
Enter a Role Name.
The new role is added to the Configured Roles pane.
Click Edit Role for the new role.
In the Based on Filter dropdown, select a filter. The filter must include the unique identifier column for the target user accounts (e.g., for Active Directory, the
objectGUID
).If the filter contains Parameters, they appear in the Filter Parameters pane.
Click Add for the Role Items pane. A new entry appears.
Select values for the following dropdowns:
- System
The target system.
- Group Table
The target system's groups table.
- Group Script ID
The column in the Group Table to use as the unique identifier for groups in the target system.
- Filter Member
The column in the selected filter to use as the unique identifier for users in the target system.
In the Groups tab, add groups to the selected role item using the checkboxes in the Included column.
Optional: In the Filter Parameters pane, enter a value for the available parameter(s) to narrow the subset of users to include in this role item.
Go to the Members tab to see pending member—group assignments, based on the above configuration.
Optional: Repeat steps (8) - (12) to add additional role items. These may include groups in different target systems. For example:
Click Save.
Go to Output > Roles.
Go to the Role Models tab.
Edit a role model for the current Development role model.
Click Edit Role for the relevant role.
Continue by following the steps in Create a role.
Go to Output > Roles.
Go to the Role Models tab.
Click Remove Role for the relevant role.
Click Yes.