Only users who are defined as Role Module Administrators or Role Managers in the Roles Based Provisioning Module can log in to the Role Mapping Administrator. After a user is logged in, the user can perform only the tasks associated with his or her assigned role:
Role Module Administrator: Authorizes a user to:
Map connected systems authorizations to all Identity Manager roles
Create, modify, and remove Identity Manager roles
Role Manager: Authorizes a user to:
Map connected systems authorizations to select Identity Manager roles
Create, modify, and remove select Identity Manager roles
A Role Manager can only map and manage Identity Manager roles to which he or she has been granted access in the Roles Based Provisioning Module. Roles to which the user doesn’t have access are not displayed in the Role Mapping Administrator.
For information, see Section 2.5, Granting Rights to the Use Role Mapping Administrator.