EIM access control group: API authority

This information displays tables that are organized by the Enterprise Identity Mapping (EIM) operation that the API performs.

Each of the following tables displays each EIM API, the different EIM access control groups, and the whether the access control group has authority to perform a specific EIM function.

Table 1. Working with domains
EIM API LDAP administrator EIM administrator Identifiers administrator EIM mapping lookup Registry administrator Aministrator for selected registry
eimChangeDomain X X - - - -
eimCreateDomain X - - - - -
eimDeleteDomain X X - - - -
eimListDomains X X - - - -
Table 2. Working with identifiers
EIM API LDAP administrator EIM administrator EIM identifiers administrator EIM mapping lookup EIM registries administrator EIM registry X administrator
eimAddIdentifier X X X - - -
eimChangeIdentifier X X X - - -
eimListIdentifiers X X X X X X
eimRemoveIdentifier X X - - - -
eimGetAssociated
Identifiers
 X X X X X X
Table 3. Working with registries
EIM API LDAP administrator EIM administrator EIM identifiers administrator EIM mapping lookup EIM registries administrator EIM registry X administrator
eimAddApplication
Registry
 X X - - - -
eimAddSystemRegistry X X - - - -
eimChangeRegistry X X - - X X
eimChange
RegistryUser
 X X - - X X
eimChangeRegistryAlias X X - - X X
eimGetRegistry
NameFromAlias
 X X X X X X
eimListRegistries X X X X X X
eimListRegistry
Associations
 X X X X X X
eimListRegistryAliases X X X X X X
eimListRegistry
Users
 X X X X X X
eimRemoveRegistry X X - - - -
Table 4. Working with identifier associations. For eimAddAssociation() and eimRemoveAssociation() APIs there are four parameters that determine the type of association that is either being added or removed. The authority to these APIs differs based on the type of association specified in these parameters. In the following table, the type of association is included for each of these APIs.
EIM API LDAP administrator EIM administrator EIM identifiers administrator EIM mapping lookup EIM registries administrator EIM registry X administrator
eimAddAssociation (administrative) X X X - - -
eimAddAssociation (source) X X X - - -
eimAddAssociation (source and target) X X X - X X
eimAddAssociation (target) X X - - X X
eimListAssociations X X X X X X
eimRemoveAssociation (administrative) X X X - - -
eimRemoveAssociation (source) X X X - - -
eimRemoveAssociation (source and target) X X X - X X
eimRemoveAssociation (target) X X - - X X
Table 5. Working with policy associations
EIM API LDAP administrator EIM administrator EIM identifiers administrator EIM mapping lookup EIM registries administrator EIM registry X administrator
eimAddPolicyAssociation X X - - X X
eimAddPolicyFilter X X - - X X
eimListPolicyFilters X X X X X X
eimRemove
PolicyAssociation
 X X     X X
eimRemovePolicyFilter - - - - -  
Table 6. Working with mappings
EIM API LDAP administrator EIM administrator EIM identifiers administrator EIM mapping lookup EIM registries administrator EIM registry X administrator
eimGetAssociatedIdentifier X X X X X X
eimGetTargetFromIdentifier X X X X X X
eimGetTargetFromSource X X X X X X
Table 7. Working with access
EIM API LDAP administrator EIM administrator EIM identifiers administrator EIM mapping lookup EIM registries administrator EIM registry X administrator
eimAddAccess X X - - - -
eimListAccess X X - - - -
eimListUserAccess X X - - - -
eimQueryAccess X X - - - -
eimRemoveAccess X X - - - -