Roles Module - My Roles
- 21 Jun 2023
- 2 Minutes to read
- Print
- DarkLight
Roles Module - My Roles
- Updated on 21 Jun 2023
- 2 Minutes to read
- Print
- DarkLight
Article Summary
Share feedback
Thanks for sharing your feedback!
Roles Module - My Roles and Other Roles
My Roles displays all roles created or managed by the user. Users must have RapidIdentity Portal Roles creation rights or be a role manager to access My Roles.
Other Roles in the Left Menu Items provides an interface for members of the RapidIdentity Portal Helpdesk Role to search and maintain the membership lists of all roles present in the Roles module.
Roles can be filtered using the Search within My Roles or Other Roles search bar.
Clicking the three button menu to the left of the role name gives you the options for Details, Clone, Delete or Sync
Details
| Field | Description |
|---|---|
| ID | idautoID of the Role |
| Name | Role Name |
| Description | Role Description |
| Membership Managers Can Edit | If Checked the below Membership Manager can edit the role |
| Enable Auto Synchronization | With Auto Synchronization enabled the role will sync dynamic membership to the RapidIdentity group on a schedule (see screenshot and notes below) |
| Owners | Role Owners must be members of the System Roles that enable Role Ownership |
| Membership Managers | Membership Managers if given permissions above can edit the role. |
| Exclude Disabled Accounts | When enabled, once an account is disabled they are removed from the Role |
| Sync Details Section | This section includes all relevant details of the sync status of the role |
Enable Auto Syncronization
When enabled the below fields are displayed to configure the syncronization.
Note
Role Syncronization in the Roles Module involves syncing accounts into RapidIdentity Roles based up on dynamic filters. This syncronization does not include syncronization of roles to external systems such as Active Directory, Google, or Azure
Static
The purpose of the Static Membership of a role is to override the Dynamic Inclusion or Exclusion filter results for an individual account.
Dynamic
Dynamic Membership allows a Role owner to add members to a Role based on attributes in their user profile; the benefit is to create department Roles quickly. For example, a Role can be formed within the directory where only members with 'HR' listed as their department will be added. The filtering attribute is limited only by the information available in the base user profile.
The purpose of a Dynamic Exclusion is to exclude subsets of users that match the Dynamic Inclusion filtering attribute, but are not wanted in the Role membership list. In the previous example of a Role with all HR department members included, any user that is a member of the HR department, but works in building 250, can be excluded based on office location.
Members Button
The Members Button will show you the current members if the role and let you search that list. You can also see any Add Pending or Remove Pending members until the next Sync.
Was this article helpful?