Advanced Search Searching Authorization Policies

15-8 Oracle Fusion Middleware Users Guide for Oracle Identity Manager Figure 15–5 The Data Constraints Page In this page, options for the feature selected on the Entity Name field in step 1 are displayed.

9. Select one of the following:

■ All Users: Select this option to specify all the users in Oracle Identity Manager for which the authorization policy is created. ■ Users that are members of selected Organizations: Select this option to specify organizations for whose members you want to create the authorization policy.

10. If you select the Users that are members of selected Organizations option, then

you must specify one or more organizations. To do so:

a. Click Add Organization. The Add Organization dialog box is displayed.

b. Click the Search icon to display the list of organizations in the Available

Organizations list.

c. From the Available Organizations list, select one or more organizations, and

then click the Move or Move All buttons to move the selected organizations to the Organizations to Add list.

d. Click Save. The selected organizations are added in the table in the Data

Constraints page.

11. Under Organization Security Setting, select Hierarchy Aware include all child

organizations to specify that the authorization policy is applicable to users who are members of all the child organizations of the selected organizations.

12. Click Next. The Policy Assignment page of the Authorization Policy wizard is

displayed, as shown in Figure 15–6 : Managing Authorization Policies 15-9 Figure 15–6 The Policy Assignment Page

13. Under Assign by Rule, select Management Chain of User to assign the direct and

indirect managers of the user to the authorization policy.

14. To assign roles to the authorization policy:

a. Click Add. The Assign Roles dialog box is displayed.

b. Click the Search icon to display the list of roles in the Available Roles list.

c. From the Available Roles list, select one or more roles, and then click the

Move or Move All buttons to move the selected roles to the Organizations to Add list.

d. Click Save. The selected roles are added to the table in the Assignment page.

15. Under Assignment Security Setting, select Assignee must be a member of the

Users Organization to specify that the authorization policy is to be applied only for the users that are members of the same organization in which the policy is applied.

16. Click Next. The Confirmation page of the Authorization Policy wizard is

displayed with details specified in the steps of the wizard.

17. Click Finish. The authorization policy is created.

15.2.2.2 Creating an Authorization Policy for Role Management

You can create custom authorization policies for role management to control the access to role management operations. For example, you can specify that users belonging to a Note: To remove a role from the table in the Assignment page, click Remove .