14.6 Defining roles

ID-Synch uses roles to allow users to set up or request user accounts based on a group of templates.

You can group the templates according to your organization's needs. For example, you can create roles to reflect:

• Job functions -- such as administrative assistant or manager.
• Departments -- such as marketing, development, or support.

Sub-roles are roles within other roles. Rather than adding templates one by one, you can add a sub-role to include a group of templates.

Read this section to learn how to use the Workflow configuration menu in the Central console (nph-psa.exe) to:

• Add roles.

• Add authorizers to define who approves account requests based on each role.

• Define which templates are included in a role.

14.6.1 Adding roles

Add roles in ID-Synch so that console user can set up multiple user accounts based on the parameters of a defined group of user accounts.

Before you start:

• Define templates. See HERE.
• Define authorizers so that you can assign them to roles.
• It is recommended that you define locations and account types to help define templates.

To add roles:

1. From the Workflow configuration menu click Roles to navigate to the Role information form.

2. Type the ID (up to 80 characters) and Description that will be displayed to ID-Synch users.

3. Type the Minimum number of authorizers if the group of accounts based on this role require approval before being created.

4. If required, select the account Location and Type.

5. Click Add.

6. Click Back to return to the Select a role page or Main to return to the Central console (nph-psa.exe) main menu.

Now you can:

• Add templates or sub-roles to the role. See HERE.
• Assign authorizers to the role. See HERE. If you entered a Minimum number of authorizers, you cannot use the role until you assign sufficient authorizers.

14.6.2 Adding templates and sub-roles to a role

Add templates to define the group of accounts that are included in a role. You can also add sub-roles, which are simply other roles that include a group of templates. The procedures for adding templates and sub-roles are similar. For simplicity, only the procedure for adding templates is described here.

Before you start, create the role as described in HERE.

To add templates to roles:

1. On the Role information form, click Add in the This role includes these templates section.

2. If required, enter search criteria, or leave the fields blank to see all templates.

   ID-Synch displays the Select templates page.

3. Click the check boxes next to the templates you want to include in this role.

4. Click Add.

To remove templates or sub-roles from a role, click Delete next to the name of the sub-role or template on the Role information page. The associated accounts are no longer included in an account request based on the role. The sub-role or template still exists in the ID-Synch database, and can be selected by users.

14.6.3 Defining authorizers for a role

Add authorizers to a role to define who approves account requests based on the role. You must assign enough authorizers to meet the minimum set when creating the role.

Before you start:

• Create the template as described in HERE.
• Define users as authorizers in ID-Synch.

To add authorizers to roles:

1. On the Role information form, click Add in the Authorizers for this template section.

2. If required, enter ID search criteria in the Specify authorizer search criteria page, or leave the field blank to see a list of all authorizers, then click Search.

   ID-Synch displays the Select authorizers page.

3. Click the check boxes next to the authorizers you want to approve account requests based on this role.
4. Click Add.

To remove authorizers from a role so that account requests based on the role no longer require their approval, click Delete next to the name of the authorizer on the Role information page. The authorizer still exists in the ID-Synch database, and can be assigned to other roles.