The Members Tab The Members tab displays the members assigned to the

Managing Roles 12-19

5. To assign the membership rule, click Confirm Assign. Otherwise, click Cancel.

The Membership Rules page is displayed.

6. To revoke this membership rule, select the Delete option for the membership rule

that you want to remove from this role, and then click Delete. In the confirmation page click Conform Delete to remove the rules from this role.

12.5.2.8 Updating Data Object Permissions

Most permissions in Oracle Identity Manager concern data objects. You can define data objects as an internal object representation of tables in Oracle Identity Manager data model. In this model, the business logic is executed and responsible for inserting, updating, and deleting data from the data store. Permissions for these actions are defined at a role level. Depending on the table or data objects, these permissions can be categorized into the following: ■ Explicit InsertUpdateDelete Permission Required ■ Explicit Permission Not Required

12.5.2.8.1 Explicit InsertUpdateDelete Permission Required

Data objects for which explicit insert, update, or delete permission is required are the ones for which you must specify the insert, update, or delete permission by using Permissions from the Role Details page in Oracle Identity Manager Administrative and User Console to create, modify, and delete entities of these data objects. Consider the following example: A user belongs to multiple roles and a data object is assigned to both of these roles. Suppose you want to delete an entity of this data object type. To be able to do so, you must ensure that both roles have update permission on the data object. A user belongs to the Request Template Administrators and Request Administrators roles, and a data object is assigned to both of these roles. Suppose you want to delete an entity of this data object type. To be able to do so, you must ensure that both the Request Template Administrators and Request Administrators roles have update permission on the data object. Table 12–7 lists the data objects listed in this category and the entities of these data objects. Table 12–7 Data Objects Requiring Explicit InsertUpdateDelete Permissions Data Object Type Entities com.thortech.xl.dataobj.tcACS Organization.Lnk_Act_Svr com.thortech.xl.dataobj.tcADL Adapter Factory LogicSetVariable tasks com.thortech.xl.dataobj.tcADM Adapter Factory Inputoutput parameters com.thortech.xl.dataobj.tcADP Adapter Definitions com.thortech.xl.dataobj.tcADS Adapter Factory Stored Procedure tasks com.thortech.xl.dataobj.tcADT Adapter Tasks com.thortech.xl.dataobj.tcADU Adapter Factory WebServices tasks com.thortech.xl.dataobj.tcADV Adapter Factory Variables com.thortech.xl.dataobj.tcAPA Attestation Process Administrators com.thortech.xl.dataobj.tcARS Adapter Statuses com.thortech.xl.dataobj.tcATP Adapter Factory Parameter Task Table