14.5 Understanding the Roles Legend

Most pages you work with on the Roles tab include a button in the upper right corner that lets you display the Roles legend. To display the legend, click the Legend button, shown in Figure 9-2:

Figure 14-3 The Legend Button

Legend button

The legend provides a brief description of the icons used throughout the Roles tab. The figure below shows the legend.

Figure 14-4 Roles Legend

The table below provides detailed descriptions of the icons in the legend:

Table 14-3 Legend Icons

Icon

Description

Running: Processing

Indicates that a role request is still in process.

Appears on the View Request Status page.

Pending Approval

Indicates that a role request is awaiting approval, either for a separation of duties exception or for the role assignment itself.

Appears on the View Request Status page.

Approved

Indicates that a role request has been approved. If a separation of duties exception was detected, this status can also be used to indicate that the exception was approved.

Appears on the View Request Status page.

Pending Activation

Indicates that a role request has completed its processing and has been approved, but has an activation date that is in the future.

Appears on the My Roles and View Request Status pages.

Completed: Provisioned

Indicates that a role request has been approved and the role has been assigned to the recipient (user, group, or container).

Appears on the My Roles, Role Assignments, and View Request Status pages.

Denied

Indicates that a role request has been denied. If a separation of duties exception was detected, this status may also be used to indicate that the exception was denied.

Appears on the View Request Status pages.

Terminated

Indicates that a role request terminated before completion, either because the user cancelled the request or because an error occurred during the course of processing.

Appears on the View Request Status pages.

Role

Indicates that an object is a role.

Appears on the My Roles, Role Assignments, and View Request Status pages.

Higher Level Relationship

Indicates that a role has a higher-level relationship to the currently selected role, which means that it contains the currently selected role.

Appears on the Manage Role Relationships pages.

Lower Level Relationship

Indicates that a role has a lower-level relationship to the currently selected role, which means that is contained by the currently selected role.

Appears on the Manage Role Relationships pages.

User

Indicates that an object is a user.

Appears on the My Roles and Role Assignments pages.

Group

Indicates that an object is a group.

Appears on the My Roles and Role Assignments pages.

Container

Indicates that an object is a container.

Appears on the My Roles and Role Assignments pages.

Direct Assignment

Indicates that a role was assigned directly to the currently selected user, group, or container.

Appears on the My Roles and Roles Assignments pages.