Assigning users and groups

Edit online

You can assign users and groups to a role or to a permission.

Procedure

  1. Select Applications > App role management.
  2. Select either the Roles or Permission tab.
  3. Select the name of the role or permission in the table and in the slide out window, select Manage membership.
  4. Assign users as members.
    1. Select the Users tab.
    2. Click Assign new users from the Users table.
    3. In the Add new users pop-up window, search and select the Cloud Directory users that you want to assign.
    4. If applicable, click Configure rights to select the appropriate rights to be assigned to the permission.
    5. Click Add users.
  5. Assign groups as members.
    1. Select the Groups tab.
    2. Click Assign new groups from the Groups table.
    3. In the Add new groups pop-up window, search and select the Cloud Directory groups that you want to assign. When you select By request method to associate a group with a Role or permission, it becomes requestable by the group's members. Whenever this role or permission is requested, the flow configured in associated application is triggered.
      Note: The Use advanced flow approval method supports application access along with Fine grain access request and Requesting access for others.
    4. If applicable, click Configure rights to select the appropriate rights to be assigned to the permission.
    5. Click Add group.
      All the members of the specified Cloud Directory groups are automatically added as members.
  6. Assign dynamic groups as members.
    Note: Dynamic group is a requestable feature, Beta CI-46644 (Dynamic attribute based access control). To request this feature, contact your IBM Sales representative or IBM contact and indicate your interest in enabling this capability. If you have permission to create a support ticket, create a support ticket with the feature number. Note that IBM® Verify trial subscriptions cannot create support tickets.
    1. Select the Dynamic groups tab and click Assign dynamic groups.
    2. From the opened window, you can either select from the existing dynamic groups or create a new group, if required.