The method for assigning authorizations in Identity Governance depends on the type of authorization and your environment.
|
Authorization |
Assignment Method |
Assigned By |
|---|---|---|
|
Access Request Approver |
Access Request Approval policy |
Access Request Administrator, Customer Administrator, or Global Administrator |
|
All global authorizations |
Authorization Assignment (Configuration > Authorizations) |
Bootstrap Administrator, Customer Administrator, or Global Administrator |
|
Application Administrator |
Application in the catalog |
Application Owner, Data Administrator, Customer Administrator, Global Administrator, or Security Officer |
|
Application Owner |
Application in the catalog or review definition |
Data Administrator, Customer Administrator, Global Administrator, or Security Officer |
|
Business Role Manager |
Business role definition |
Business Roles Administrator, Customer Administrator, Global Administrator, or Security Officer |
|
Business Role Owner |
Business role definition |
Business Roles Administrator, Customer Administrator, Global Administrator, or Security Officer |
|
Escalation Reviewer |
Review definition |
Review Administrator, Customer Administrator, or Global Administrator |
|
Fulfiller |
Application setup in Fulfillment > Configuration or Business role definition |
Business Roles Administrator, Fulfillment Administrator, Customer Administrator, Global Administrator, or Security Officer |
|
Permission Owner |
Review definition |
Customer Administrator, Global Administrator, Data Administrator, or Security Officer |
|
Review Auditor |
Review definition |
Review Administrator, Customer Administrator, or Global Administrator |
|
Review Owner |
Review definition |
Review Administrator, Review Owner, Customer Administrator, or Global Administrator |
|
Reviewer |
Review definition |
Review Administrator, Customer Administrator, or Global Administrator |
|
SoD Policy Owner |
SoD policy definition |
Separation of Duties Administrator, Customer Administrator, or Global Administrator |
|
Technical Role Owner |
Technical role definition |
Technical Roles Administrator, Customer Administrator, or Global Administrator |