Administrative Menus Display for Basic Role Users in Identity Governance

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

This article addresses an issue where users assigned to the "Basic Role" continue to see administrative menus within the user console after an environment upgrade. This behavior typically indicates a configuration mismatch in the property settings.

Environment

Identity Governance 

Cause

The issue occurs because the sage.security.disable attribute is set to true in the property settings, which overrides standard role-based access controls.

Resolution

To resolve this issue and ensure that basic role users do not see administrative menus, follow these steps:

1. Navigate to Property Settings:

   • Log in to the Identity Governance application with an administrative account.
   • Navigate to Administration > Settings > Property Settings.

2. Modify the Attribute:

   • Locate the attribute sage.security.disable.
   • Change the value from true to false.

3. Apply Changes:

   • Save the configuration changes.
   • Restart the JBoss application server to apply the update.

Note: Recycling the JBoss server will result in temporary service unavailability. Plan this operation during a scheduled maintenance window.

 

 

Attribute	Value	Action
sage.security.disable	true	Causes issue
sage.security.disable	false	Corrects issue