The Attributes Tab The Attributes tab displays the role attributes in the

Managing Roles 12-17

4. Click Save. If the XL.RM_REQUEST_ENABLED and

XL.RM_ROLE_ASSIGN_TEMPLATE system properties are set, then after clicking Save, a confirmation message is displayed in the role details page along with the request ID. Otherwise, only a confirmation message is displayed. If a request is created, then the users are displayed as members in the Direct Members section only after the request is approved. Otherwise, the users are displayed as members immediately in the Direct Members section. Also, note that the users are displayed in the All Members section.

12.5.2.4.8 Revoking Members from a Role

To revoke members from a role: 1. In any section of the Members tab, select the member that you want to revoke.

2. From the Actions menu, select Revoke Revoke Members. Alternatively, click

Revoke Members from: on the toolbar. The Revoke User from: dialog box is displayed. 3. Search for members by specifying a search criterion in the Search Users field and clicking the search icon. The list of members that matches your search criterion is displayed in the Available list. 4. Select one or more members that you want to revoke from the open role. Then, click Move or Move All to move the selected members to the Selected list.

5. Click Save. A confirmation message is displayed on the role details page.

6. The members that you have revoked are removed from the list of members in the Members tab.

12.5.2.4.9 Opening Member Details

To open the member user details of the open role: 1. In any section of the Members tab, select the member whose details you want to open.

2. From the Actions menu, select Open Open Member Detail. Alternatively, click

Open User on the toolbar. The user details page for the member is displayed that allows you to view and modify the member details. Tip: ■ If the member users are not displayed in the Members tab immediately after they are added, then refresh the view. ■ If users are created or updated to match membership rules criteria, then they are assigned directly to this role and the table must be refreshed to view those members in both sections, All Members and Direct Members. Note: Only direct members can be revoked except for the members that are assigned via membership rules. 12-18 Oracle Fusion Middleware Users Guide for Oracle Identity Manager

12.5.2.5 Viewing Menu Items

You can display all menu items that are permitted for the role. In11g Release 1 11.1.1, new menu items cannot be assigned to any role. By default, menu items are already assigned to some default roles in Oracle Identity Manager. To display the menu items for a role:

1. In the browse tree for roles on the left pane, select a role for which you want to

display the permitted menu items.

2. From the Actions menu, select Menu Items. The Role Details Menu Items page

is displayed with a list of menu items permitted for the selected role.

12.5.2.6 Viewing, Assigning, and Revoking Access Policies

You can display all available access policies for this role and assign and revoke access policies for the role. To assign access policies to a role: 1. In the browse tree for roles on the left pane, select the role for which you want to assign access policy.

2. From the Actions menu or Role Details page select Access Policies. The Access

Policies page is displayed.

3. To assign a new access policy, click Assign Policy. The Assign Access Policies

page is displayed. This page displays the policy name and brief description of the policy.

4. Select the Assign option for the access policies that you want to assign to this role,

and then click Assign. The Confirmation page is displayed. 5. To assign the access policy, click Confirm Assign. The Access Policies page is displayed.

6. To remove this access policy, select the Delete option for the access policies that

you want to remove from this role, and then click Delete. In the confirmation page, Click Confirm Delete to remove access policies from this role

12.5.2.7 Viewing, Assigning, and Revoking Membership Rules

You can display all available membership rules for this role, assign a new membership rule for the role, and remove membership rules. To work with membership rules:

1. In the browse tree for roles, select the role for which you want to assign or revoke

membership rules.

2. From the Actions menu, select Membership Rules. The Membership Rules page is

displayed.

3. To assign a new membership rule, click Assign Rules. The Assign Membership

Rules page is displayed. This page displays the name of the membership rule.

4. Select the Assign option for the membership rules that you want to assign to this

role, and then click Assign. The Confirmation page is displayed. Note: The existing menu items cannot be revoked.