Admin Tasks › Admin Task Planning

Admin Task Planning

Admin roles consist of admin tasks, which represent granular capabilities for managing objects. For example, you could manage a user object by using these admin tasks:

• Create User
• View User
• Modify User
• Reset User Password

Admin tasks include events, actions that Identity Manager performs to complete the task. A task may include multiple events. For example, the Create User task may include events that create the user's profile, adds the user to a group, and assigns roles.

You create or modify each task to match your exact requirements. Then, you combine the appropriate admin tasks into admin roles, which you assign to administrators. With these roles, administrators have the exact privileges they need to manage objects.

To plan admin task creation, decide which objects you need to manage (user, group, organization, role, or task) and which administrators will use these tasks. For example:

• To manage users, help desk administrators need tasks that manage user attributes, such as a user ID or title.
• To manage users' access to applications, other administrators need tasks that make users members of access roles.
• To manage the roles used by help desk administrators, higher-level administrators need tasks that manage admin roles.

For one type of object, such as users, you can create tasks so that different administrators manage different attributes. For example, the following figure shows a user who is managed by two administrators.

• Admin 1 has the Reset User Password task; that administrator can view the employee's user ID and name or reset her password.
• Admin 2 has the Modify User task; that administrator can view the employee's user ID and name or modify her title and vacation days.