The method for assigning authorizations in Identity Governance depends on the type of authorization.
|
Authorization |
Assignment Method |
Assigned By |
|---|---|---|
|
Access Request Approver |
Access Request Approval policy |
Access Request Administrator or Global Administrator |
|
All global authorizations |
Configuration menu |
Bootstrap administrator or Global administrator |
|
Application Administrator |
Application in the catalog |
Application Owner, Data Administrator, Global Administrator, or Security Officer |
|
Application Owner |
Application in the catalog or review definition |
Data Administrator, Global Administrator, or Security Officer |
|
Business Role Manager |
Business role definition |
Business Roles Administrator, Global Administrator, or Security Officer |
|
Business Role Owner |
Business role definition |
Business Roles Administrator, Global Administrator, or Security Officer |
|
Escalation Reviewer |
Review definition |
Review Administrator or Global Administrator |
|
Fulfiller |
Application setup in Fulfillment > Configuration or Business Role definition |
Business Roles Administrator, Fulfillment Administrator, Global Administrator, or Security Officer |
|
Permission Owner |
Review definition |
Global Administrator, Data Administrator, or Security Officer |
|
Review Auditor |
Review definition |
Review Administrator or Global Administrator |
|
Review Owner |
Review definition |
Review Administrator, Review Owner, or Global Administrator |
|
Reviewer |
Review definition |
Review Administrator or Global Administrator |
|
SoD Policy Owner |
SoD policy definition |
Separation of Duties Administrator or Global Administrator |
|
Technical Role Owner |
Technical role definition |
Technical Roles Administrator or Global Administrator |