8.2 Create a New Administrator Assignment

You can create an administrator assignment for a user, group, container, or role type. Perform the following steps to create a new administrator assignment:

Click .
Specify the Initial Request Description that describes the purpose of this assignment.

Select the Domain Type from the list.

Domain	Description
Provisioning	This domain defines the rights to launch and retract process requests, manage addressee tasks, and configure delegate, proxy, and availability settings.
Role	This domain defines the rights to manage roles and SoDs, assign, revoke, and report on roles, as well as rights to configure role settings.
Resource	This domain defines the rights to manage resources, assign, revoke, and report on resources, as well as rights to configure resource settings and bind entitlements.
Security	This domain defines the rights to manage Identity Applications security, such as assign and revoke domain administrators and managers. This also provides the right to configure teams.

Select the Assignment Type for which you want to create an assignment.

This displays the list of users, groups, container, or roles based on the selected assignment type.
Select the required user, group, container or a role on from the provided list to create an assignment.
(Conditional) Specify the Effective Date for this assignment. If you do not specify any date, creates an assignment immediately.
(Conditional) Specify the Expiration Date for this assignment. If you do not specify any date, the expiration date is set to never.
(Conditional) To create a domain administrator assignment for the selected domain, enable All Permissions.

NOTE:This option cannot be edited after creating the assignment. For a delegated administrator, you can assign permissions individually. See, Assign Permissions to a Delegated Administrator.

If this option is disabled, a delegated administrator is created for the selected domain.
Click Create.