Default Roles Oracle Fusion Middleware Online Documentation Library

Managing Roles 12-11

12.5.1 Creating Roles

When you first create a new role, the Role Details page shows the role name. You can add information to a role by using the Additional Detail menu as described in Managing Roles on page 12-12. To create a role:

1. Login to Oracle Identity Administration.

2. In the Welcome page, under Roles, click Create New Role.

Alternatively, in the Browse tab of the left pane, expand Roles, and from the Actions menu, select Create Role. Otherwise, click the Create Role icon on the toolbar. The Create Role page is displayed.

3. Enter values in the fields.

Table 12–6 lists the fields in the Create Role page. Note that Manage Localizations is displayed with the Display Name fields because these are multi-language fields. This means that you can enter and save attribute values in more than one language. Note: ■ A user cannot be removed from the All Users role. ■ A role, SELF OPERATORS, is added to Oracle Identity Manager by default. This role contains one user, XELSELFREG, who is responsible for modifying user permissions for performing self-registration in the Administration Console. Oracle recommends that you do not modify the permissions associated with the SELF OPERATORS role and do not assign users to this role. Table 12–6 Fields in the Create Role Page Field Description Role Name The name of the role Display Name The role name as displayed in the UI Email The e-mail ID of the role Description The description for the role Role Category The category to which the role belongs If a role category is not specified in this field, then the role is created in the Default category. See Creating and Managing Role Categories on page 12-22 for information about role categories. Owned By The owner of the role The role owner is a user who has permissions to view, modify, and delete the role without having to create custom authorization policies. See Managing Authorization for Roles on page 12-23 for information about authorization policies for role management. 12-12 Oracle Fusion Middleware Users Guide for Oracle Identity Manager

4. Click Save. The role is created successfully and role name, role namespace, LDAP

Attributes such as LDAP GUID and LDAP DN are displayed in a new page.

12.5.2 Managing Roles

You can find roles, add information to them, and perform other administrative functions for roles. This section discusses the following topics: ■ Browsing Roles ■ Searching for Roles ■ Deleting Roles ■ Viewing and Administering Roles ■ Viewing Menu Items ■ Viewing, Assigning, and Revoking Access Policies ■ Viewing, Assigning, and Revoking Membership Rules ■ Updating Data Object Permissions

12.5.2.1 Browsing Roles

You can browse the roles that exist in Oracle Identity Manager in the Roles tab. To browse roles:

1. In the left pane of Oracle Identity Administration, click the Browse tab.

2. Expand OIM Roles. The role categories are displayed. For more information about

role categories, see Creating and Managing Role Categories on page 12-22. In the Browse tab, you can perform various tasks related to roles and role categories. For details, see Viewing and Administering Roles on page 12-14.

12.5.2.2 Searching for Roles

Oracle Identity Management Administration allows you to perform the following types of search operations for roles: ■ Performing Simple Search for Roles ■ Performing Advanced Search for Roles

12.5.2.2.1 Performing Simple Search for Roles To perform a simple search for roles:

1. In the left pane of Oracle Identity Administration, under Search, select Roles.

2. Specify a search criterion in the field next to the list. You can include wildcard characters in your search criterion. For performance reasons, initial prefix wildcards will be removed. However, a trailing prefix wildcard will be added to all searches.

3. Click the search icon to the right of the field. A list of roles that match the search

criterion is displayed in the Search Results tab. Note: is the only wildcard search allowed in Oracle Identity Management Administration. Managing Roles 12-13 In the Search Results tab, you can edit and delete roles. For details, see Viewing and Administering Roles on page 12-14 and Deleting Roles on page 12-13.

12.5.2.2.2 Performing Advanced Search for Roles To perform an advanced search for

roles:

1. In the Welcome page, under Roles, click Advanced Search - Roles.

Alternatively, in the Browse tab for roles in the left pane, you can click the Advanced Search: Roles icon on the toolbar. The Advanced Search: Roles page is displayed. 2. Select any one of the following options: ■ All: On selecting this option, the search is performed with the AND condition. This means that the search operation is successful only when all the search criteria specified are matched. ■ Any: On selecting this option, the search is performed with the OR condition. This means that the search operation is successful when any search criterion specified is matched. 3. In the Name field, enter the role name that you want to search. You can use wildcard characters in your search criteria. Select a search comparator in the list adjacent to the Name field. The default search comparator is Begins With. The comparator Equals is available in the pulldown list as an alternative. 4. Similarly, enter search criteria in all the other fields. You can add fields to the Advanced Search: Roles page. To do so, click Add Fields, and then select the field name from the list.

5. Click Search. The roles that match your search criteria are displayed in the search

results table.

6. Click View and select Columns to view additional columns in the search results.

7. Click View and Reorder Columns to reorder the columns in the search results.

From the search results in the Advanced Search: Roles page, you can create new roles, edit roles, and delete roles. For details, see Creating Roles on page 12-11, Viewing and Administering Roles on page 12-14, and Deleting Roles on page 12-13.

12.5.2.3 Deleting Roles

To delete a role:

1. Search for a role as described in

Searching for Roles on page 12-12. Alternatively, you can click the Browse tab for roles in the left pane.

2. Select the role that you want to delete.

3. From the Actions list, select Delete.

Alternatively, you can click the delete icon on the toolbar. A message box is displayed asking for confirmation.

4. Click OK to confirm.

Note: Clicking Search without any value returns all roles.