2.3 Assigning Authorizations to Identity Governance Users

The method for assigning authorizations in Identity Governance depends on the type of authorization.

Authorization

Assignment Method

Assigned By

Access Request Approver

Access Request Approval policy

Access Request Administrator or Global Administrator

All global authorizations

Configuration menu

Bootstrap Administrator or Global Administrator

Application Administrator

Application in the catalog

Application Owner, Data Administrator, Global Administrator, or Security Officer

Application Owner

Application in the catalog or review definition

Data Administrator, Global Administrator, or Security Officer

Business Role Manager

Business role definition

Business Roles Administrator, Global Administrator, or Security Officer

Business Role Owner

Business role definition

Business Roles Administrator, Global Administrator, or Security Officer

Escalation Reviewer

Review definition

Review Administrator or Global Administrator

Fulfiller

Application setup in Fulfillment > Configuration or Business role definition

Business Roles Administrator, Fulfillment Administrator, Global Administrator, or Security Officer

Permission Owner

Review definition

Global Administrator, Data Administrator, or Security Officer

Review Auditor

Review definition

Review Administrator or Global Administrator

Review Owner

Review definition

Review Administrator, Review Owner, or Global Administrator

Reviewer

Review definition

Review Administrator or Global Administrator

SoD Policy Owner

SoD policy definition

Separation of Duties Administrator or Global Administrator

Technical Role Owner

Technical role definition

Technical Roles Administrator or Global Administrator