The method for assigning authorizations in Identity Governance depends on the type of authorization.
Authorization |
Assignment Method |
Assigned By |
---|---|---|
Access Request Approver |
Access Request Approval policy |
Access Request Administrator or Global Administrator |
All global authorizations |
Configuration menu |
Bootstrap Administrator or Global Administrator |
Application Administrator |
Application in the catalog |
Application Owner, Data Administrator, Global Administrator, or Security Officer |
Application Owner |
Application in the catalog or review definition |
Data Administrator, Global Administrator, or Security Officer |
Business Role Manager |
Business role definition |
Business Roles Administrator, Global Administrator, or Security Officer |
Business Role Owner |
Business role definition |
Business Roles Administrator, Global Administrator, or Security Officer |
Escalation Reviewer |
Review definition |
Review Administrator or Global Administrator |
Fulfiller |
Application setup in Fulfillment > Configuration or Business role definition |
Business Roles Administrator, Fulfillment Administrator, Global Administrator, or Security Officer |
Permission Owner |
Review definition |
Global Administrator, Data Administrator, or Security Officer |
Review Auditor |
Review definition |
Review Administrator or Global Administrator |
Review Owner |
Review definition |
Review Administrator, Review Owner, or Global Administrator |
Reviewer |
Review definition |
Review Administrator or Global Administrator |
SoD Policy Owner |
SoD policy definition |
Separation of Duties Administrator or Global Administrator |
Technical Role Owner |
Technical role definition |
Technical Roles Administrator or Global Administrator |