Controlled Permission Reconciliation Services (CPRS) helps you to keep the Identity Manager Resource Catalog synchronized with the permissions of a connected application. You must have Resource Administrator role to reconcile all the permissions into the Identity Manager Resource Catalog or migrate the permissions into the Identity Vault based on the individual permissions.