A role is only useful when it is defined to have access to a resource, and a resource is only useful as an entity that a user has access to. Therefore, you must associate roles and resources to make them useful. A user assigned to a role has access to all resources that are associated with that role.
To associate a resource with a role,
Go to the Roles Administration page.
Select the role you want to map from the list of roles.
Click Resource Associations, then click Manage Associations.
Select Resources or Entitlements to associate to a role.
You are presents with two options: Resources and Entitlements. You can bind entitlements with a role. If a role has an entitlement bound to it, it allows you to see the entitlement mapping.
or
Search for a resource by drivers installed in your Identity Manager environment. You can type in part of a driver name to display a list of resources that meet the criteria.
(Conditional) If you select Resources, you can either search for a resource or select it from the list of available resources.
(Conditional) If you select Entitlements, select the driver for granting entitlements to this role from the list of available drivers. Based on the type of the role, the list of entitlements is displayed in the page. Select an entitlement to grant for this role. Also, you can search for values associated with an entitlement. To do this, you can either enter text in the Entitlements Values search field for the entitlement you are searching for.
Click Add Association.
Enter a mapping description for the resource or entitlement you selected.
Click Apply and Close to return to the Roles Administration page.