Creating Roles Role Management Tasks

12-14 Oracle Fusion Middleware Users Guide for Oracle Identity Manager

12.5.2.4 Viewing and Administering Roles

You can open the details of a role and edit the role attributes, and modify the role inheritance and membership. To open the details of a role and modify it, perform one of the following: ■ In the role browse tree, select the role that you want to open. From the Actions menu, select Open. Alternatively, you can click the Open Role or Category Detail icon on the toolbar. ■ In the Search Results tab of the left pane, select the role that you want to open. From the Actions menu, select Open. Alternatively, you can click the Open Role Detail icon on the toolbar. ■ In the Advanced Search: Roles page, select the role that you want to open. From the Actions menu, select Open. Alternatively, you can click Open Role on the toolbar. The details of the role is displayed in a page. The role display name is displayed at the top of the page. You can display the details of the role and modify role information in the following tabs of this page: ■ The Attributes Tab ■ The Hierarchy Tab ■ The Members Tab

12.5.2.4.1 The Attributes Tab The Attributes tab displays the role attributes in the

following sections: ■ Basic Role Information: This section displays the basic attributes of the role such as role name, role namespace, display name, e-mail, and description. ■ Other Information: This section displays the information about the category to which the role belongs and the owner of the role. ■ Custom Attributes: This section displays information about the user-defined fields UDFs. ■ LDAP Attributes: This section displays information about LDAP GUID and LDAP DN if Oracle Identity Manager is integrated with LDAP. These are read-only attributes. The fields in the Attributes tab are same as available in the Create Role page. For information about all the fields in the Attributes tab, see Table 12–6, Fields in the Create Role Page . 12.5.2.4.2 The Hierarchy Tab The Hierarchy tab displays the role hierarchy information in the following sections: ■ Inherited From: This section displays the parent roles from which the open role is inherited. The base role has the same permissions and privileges on the members as the inherited roles. Only inherited roles can be added or removed from the base role, but the base role cannot be added or removed from the inherited role. Note: You are not allowed to delete a role, which is the parentchild of some other role. To delete such a role, you must first remove the associated parent-child role relationships. Once the role is no longer involved in any role relationships, it can be deleted. Managing Roles 12-15