20.2 Configuring the Roles Settings

To configure the roles settings:

  1. Click Configure Roles and Resources Settings in the Configuration group of actions.

  2. Scroll to the Roles Settings section of the page.

    The following settings are read-only settings that are fixed at installation time:

    • Roles Container

    • Role Request Container

    • Default Role Approval Definition

  3. Specify (in seconds) a Role Assignment Grace Period.

    This value specifies the amount of time, in seconds, before a role assignment is removed from the Role Catalog (0 by default). A grace period of zero means that when someone is removed from a role assignment, the removal happens immediately and the subsequent revocation of entitlements is initiated immediately. You might use the grace period to delay the removal of an account that would subsequently be re-added (for example if a person was being moved between containers). An entitlement can disable an account (this is the default) rather than removing it.

    NOTE:The Role Assignment Grace Period is a legacy setting that affects only Role to Entitlement assignments; it does not affect Role to Resource to Entitlement mappings. It has no impact on roles created or assigned with the new resource model provided in this release.

  4. Define the display name for the role levels. Each level has a separate display name that can be translated into several languages. To provide foreign-language strings, click Add language display value.

  5. Click Save to make your settings permanent.