Configuring Access Review Permissions for System Owners — Identity Governance

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

This article details the configuration required to limit System Owner access to role-based reviews within Identity Governance. These steps restrict users to read-only access for roles associated with their specific applications.

Environment

Identity Governance 14.5 & 15

Resolution

1. Disable Security and Restart

1. Log in to the Identity Governance administration portal.
2. In Property Settings, search for sage.security.disable.
3. Set the value to False.
4. Restart the server to apply changes.

2. Configure System Account Resources

1. Open the Eurekify configuration file using the DNA tool.
2. Locate the target user account, right-click, and select Show linked entities.
3. Remove the Basic Role assignment.
4. Link the account only to the following resources:
   • TmsSystem.*
   • SelfService.*
   • [Universe][R]
   • Entity Browser
5. Save the configuration to the database.

3. Define and Apply Filter Resources

1. Open Eurekify_Resources.rdb and create a new resource with the following attributes:
   • Res Name 1: [FILTER_ROLE]
   • Res Name 2: *
   • Res Name 3: Filter
   • Type: Filter
   • Filter 1: (rolename=[YourRoleName])
2. Save the configuration to the database.
3. Drag the new Filter resource into your main Eurekify.cfg and link it to the user account created in Section 2.
4. Add the new role to your model configuration and save.

Additional Information

​For more information on how to use Filters and provide the permissions please review the documentation: Filter Type Resources - 14.5 or Filter Type Resources - v15

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.