Membership

Select the focus for a specific entity access that is governed by this access control item.

The fields vary depending on the protection category that you specified on the General page. The protection categories are:

Account

Select one or more of the following choices as the focus for the account entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The account owner: Select this check box to add the account owner to the membership of this access control item.
The manager of the account owner: Select this check box to add the manager of the account owner to the membership of this access control item.
The owner of the service that the account resides on: Select this check box to add the owner of the service on which the account is to the membership of this access control item.
The owner of any access defined on the service that the account is on: Select to add the owner of the access that is defined on the service on which the account is to the membership of this access control item.
The sponsor of the business partner organization in which the account resides: Select this check box to add the sponsor of the business partner organization in which the account is to the membership of this access control item.
The administrator of the domain in which the account is: Select this check box to add the administrator of the domain in which the account is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove it.

Account Default Template

Select one or more of the following choices as the focus for the account default template entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the account default template resides: Select this check box to add the supervisor of the business unit in which the account default template is to the membership of this access control item.
The owner of the service for which account defaults are being defined: Select this check box to add the owner of the service for which account defaults are being defined to the membership of this access control item.
The owner of any access defined on the service for which account defaults are being defined: Select to add the owner of the access that is defined on the service for which account defaults are being defined to the membership of this access control item.
The sponsor of the business partner organization in which the account default template is: Select this check box to add the sponsor of the business partner organization in which the account default template is to the membership of this access control item.
The administrator of the domain in which the account default template resides: Select this check box to add the administrator of the domain in which the account default template is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Admin Domain

Select one or more of the following choices as the focus for the admin domain entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the admin domain resides: Select this check box to add the supervisor of the business unit in which the admin domain is to the membership of this access control item.
The sponsor of the business partner organization in which the admin domain resides: Select this check box to add the sponsor of the business partner organization in which the admin domain is to the membership of this access control item.
The administrator of the admin domain: Select this check box to add the administrator of the admin domain to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove it.

Business Partner Organization

Select one or more of the following choices as the focus for the business partner organization entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the business partner organization resides: Select this check box to add the supervisor of the business unit in which the business partner organization is to the membership of this access control item.
The sponsor of the business partner organization: Select this check box to add the sponsor of the business partner organization to the membership of this access control item.
The administrator of the domain in which the business partner organization resides: Select this check box to add the administrator of the domain in which the business partner organization is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Business Partner Person

Select one or more of the following choices as the focus for the business partner person entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The profile owner: Select this check box to add the profile owner to the membership of this access control item.
The manager of the profile owner: Select this check box to add the manager of the profile owner to the membership of this access control item.
The sponsor of the business partner organization in which the business partner person resides: Select this check box to add the sponsor of the business partner organization in which the business partner person is to the membership of this access control item.
The administrator of the domain in which the business partner person resides: Select this check box to add the administrator of the domain in which the business partner person is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Credential

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The account owner: Select this check box to add the account owner to the membership of this access control item.
The manager of the account owner: Select this check box to add the manager of the account owner to the membership of this access control item.
The owner of the service that the account resides on: Select this check box to add the owner of the service on which the account is to the membership of this access control item.
The owner of any access defined on the service that the account resides on: Select to add the owner of the access that is defined on the service on which the account is to the membership of this access control item.
The sponsor of the business partner organization in which the account resides: Select this check box to add the sponsor of the business partner organization in which the account is to the membership of this access control item.
The administrator of the domain in which the account resides: Select this check box to add the administrator of the domain in which the account is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Credential Lease

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The account owner: Select this check box to add the account owner to the membership of this access control item.
The manager of the account owner: Select this check box to add the manager of the account owner to the membership of this access control item.
The owner of the service that the account resides on: Select this check box to add the owner of the service on which the account is to the membership of this access control item.
The sponsor of the business partner organization in which the account resides: Select this check box to add the sponsor of the business partner organization in which the account is to the membership of this access control item.
The administrator of the domain in which the account resides: Select this check box to add the administrator of the domain in which the account is to the membership of this access control item.
The credential lessee: Select this check box to add the credential lessee to the membership of this access control item.
The manager of the credential lessee: Select this check box to add the manager of the credential lessee to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Credential Pool

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The owner of the credential pool: Select this check box to add the owner of the credential pool to the membership of this access control item.
The supervisor of the business unit in which the credential pool resides: Select this check box to add the supervisor of the business unit in which the credential pool is to the membership of this access control item.
The owner of the service that the credential pool refers to: Select this check box to add the service owner to which the credential pool refers to the membership of this access control item.
The sponsor of the business partner organization in which the credential pool resides: Select this check box to add the sponsor of the business partner organization in which the credential pool is to the membership of this access control item.
The administrator of the domain in which the credential pool resides: Select this check box to add the administrator of the domain in which the credential pool is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Dynamic Organizational Role

Select one or more of the following choices as the focus for the dynamic organizational role entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the dynamic organizational role resides: Select this check box to add the supervisor of the business unit in which the dynamic organizational role is to the membership of this access control item.
The owners of the role: Select this check box to add one or more role owners to the membership of this access control item.
The sponsor of the business partner organization in which the dynamic organizational role resides: Select this check box to add the sponsor of the business partner organization in which the dynamic organizational role is to the membership of this access control item.
The administrator of the domain in which the dynamic organizational role resides: Select this check box to add the administrator of the domain in which the dynamic organizational role is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Global Operation

Select one or both of the following choices as the focus for the Global operation that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Identity Manager User

Select one or more of the following choices as the focus for the Identity Manager user entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The Identity Manager user: Select this check box to add the Identity Manager user to the membership of this access control item.
The manager of the Identity Manager user: Select this check box to add the manager of the Identity Manager user to the membership of this access control item.
The owner of the Identity Manager service: Select this check box to add the owner of the Identity Manager service to the membership of this access control item.
The sponsor of the business partner organization in which the Identity Manager user resides: Select this check box to add the sponsor of the business partner organization in which the Identity Manager user is to the membership of this access control item.
The administrator of the domain in which the Identity Manager user resides: Select this check box to add the administrator of the domain in which the Identity Manager user is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Identity Policy

Select one or more of the following choices as the focus for the identity policy entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the identity policy resides: Select this check box to add the supervisor of the business unit in which the identity policy is to the membership of this access control item.
The sponsor of the business partner organization in which the identity policy resides: Select this check box to add the sponsor of the business partner organization in which the identity policy is to the membership of this access control item.
The administrator of the domain in which the identity policy resides: Select this check box to add the administrator of the domain in which the identity policy is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

ITIM Group

Select one or more of the following choices as the focus for the ITIM group entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the ITIM group resides: Select this check box to add the supervisor of the business unit in which the ITIM group is to the membership of this access control item.
The sponsor of the business partner organization in which the ITIM group resides: Select this check box to add the sponsor of the business partner organization in which the ITIM group is to the membership of this access control item.
The administrator of the domain in which the ITIM group resides: Select this check box to add the administrator of the domain in which the ITIM group is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Location

Select one or more of the following choices as the focus for the location entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the location: Select this check box to add the supervisor of the location to the membership of this access control item.
The sponsor of the business partner organization in which the location resides: Select this check box to add the sponsor of the business partner organization in which the location is to the membership of this access control item.
The administrator of the domain in which the location resides: Select this check box to add the administrator of the domain in which the location is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Organizational Unit

Select one or more of the following choices as the focus for the organizational unit entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the organizational unit: Select this check box to add the supervisor of the organizational unit to the membership of this access control item.
The sponsor of the business partner organization in which the organizational unit resides: Select this check box to add the sponsor of the business partner organization in which the organizational unit is to the membership of this access control item.
The administrator of the domain in which the organizational unit resides: Select this check box to add the administrator of the domain in which the organizational unit is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Password Policy

Select one or more of the following choices as the focus for the password policy entity access that is governed by this access control item.

All users in the system: When you select this item, all other items are unavailable.
The supervisor of the business unit in which the password policy resides: Select this check box to add the supervisor of the business unit in which the password policy is to the membership of this access control item.
The sponsor of the business partner organization in which the password policy resides: Select this check box to add the sponsor of the business partner organization in which the password policy is to the membership of this access control item.
The administrator of the domain in which the password policy resides: Select this check box to add the administrator of the domain in which the password policy is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Person

Select one or more of the following choices as the focus for the person entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The profile owner: Select this check box to add the profile owner to the membership of this access control item.
The manager of the profile owner: Select this check box to add the manager of the profile owner to the membership of this access control item.
The sponsor of the business partner organization in which the person resides: Select this check box to add the sponsor of the business partner organization in which the person is to the membership of this access control item.
The administrator of the domain in which the person resides: Select this check box to add the administrator of the domain in which the person is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Provisioning Policy

Select one or more of the following choices as the focus for the provisioning policy entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the provisioning policy resides: Select this check box to add the supervisor of the business unit in which the provisioning policy is to the membership of this access control item.
The sponsor of the business partner organization in which the provisioning policy resides: Select this check box to add the sponsor of the business partner organization in which the provisioning policy is to the membership of this access control item.
The administrator of the domain in which the provisioning policy resides: Select this check box to add the administrator of the domain in which the provisioning policy is to the membership of this access control item.
Users who are members of these groups: Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Recertification Policy

Select one or more of the following choices as the focus for the recertification policy entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the recertification policy resides: Select this check box to add the supervisor of the business unit in which the recertification policy is to the membership of this access control item.
The sponsor of the business partner organization in which the recertification policy resides: Select this check box to add the sponsor of the business partner organization in which the recertification policy is to the membership of this access control item.
The administrator of the domain in which the recertification policy resides: Select this check box to add the administrator of the domain in which the recertification policy is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Report

Select one or more of the following choices as the focus for the report entity access that is governed by this access control item.

Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Separation of Duty Policy

Select one or more of the following choices as the focus for the separation of duty policy entity access governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The owner of the policy: Select this check box to add the policy owner to the membership of this access control item.
The supervisor of the business unit in which the separation of duty policy resides: Select this check box to add the supervisor of the business unit in which the separation of duty policy is to the membership of this access control item.
The sponsor of the business partner organization in which the separation of duty policy resides: Select this check box to add the sponsor of the business partner organization in which the separation of duty policy is to the membership of this access control item.
The administrator of the domain in which the separation of duty policy resides: Select this check box to add the administrator of the domain in which the separation of duty policy is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Service

Select one or more of the following choices as the focus for the service entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the service resides: Select this check box to add the supervisor of the business unit in which the service is to the membership of this access control item.
The owner of the service: Select this check box to add the service owner to the membership of this access control item.
The owner of any access defined on the service: Select this check box to add the owner of the access that is defined on the service to the membership of this access control item.
The sponsor of the business partner organization in which the service resides: Select this check box to add the sponsor of the business partner organization in which the service is to the membership of this access control item.
The administrator of the domain in which the service resides: Select this check box to add the administrator of the domain in which the service is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Service Group

Select one or more of the following choices as the focus for the service group entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the service group resides: Select this check box to add the supervisor of the business unit in which the service group is to the membership of this access control item.
The owner of the service on which the groups exist: Select this check box to add the owner of the service on which the groups exist to the membership of this access control item.
The owner of any access defined on a group: Select this check box to add the owner of the access that is defined on the group to the membership of this access control item.
The sponsor of the business partner organization in which the service group resides: Select this check box to add the sponsor of the business partner organization in which the service group is to the membership of this access control item.
The administrator of the domain in which the service group resides: Select this check box to add the administrator of the domain in which the service group is to the membership of this access control item.
Users who are members of these groups: Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Service Selection Policy

Select one or more of the following choices as the focus for the service selection policy entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the service selection policy resides: Select this check box to add the supervisor of the business unit in which the service selection policy is to the membership of this access control item.
The sponsor of the business partner organization in which the service selection policy resides: Select this check box to add the sponsor of the business partner organization in which the service selection policy is to the membership of this access control item.
The administrator of the domain in which the service selection policy resides: Select this check box to add the administrator of the domain in which the service selection policy is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Shared Access Policy

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the shared access policy resides: Select this check box to add the supervisor of the business unit in which the shared access policy is to the membership of this access control item.
The sponsor of the business partner organization in which the shared access policy resides: Select this check box to add the sponsor of the business partner organization in which the shared access policy is to the membership of this access control item.
The administrator of the domain in which the shared access policy resides: Select this check box to add the administrator of the domain in which the shared access policy is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Static Organizational Role

Select one or more of the following choices as the focus for the static organizational role entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the static organizational role resides: Select this check box to add the supervisor of the business unit in which the static organizational role is to the membership of this access control item.
The owners of the role: Select this check box to add one or more role owners to the membership of this access control item.
The sponsor of the business partner organization in which the static organizational role resides: Select this check box to add the sponsor of the business partner organization in which the static organizational role is to the membership of this access control item.
The administrator of the domain in which the static organizational role resides: Select this check box to add the administrator of the domain in which the static organizational role is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Workflow Design

Select one or more of the following choices as the focus for the workflow design entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the workflow design resides: Select this check box to add the supervisor of the business unit in which the workflow design is to the membership of this access control item.
The sponsor of the business partner organization in which the workflow design resides: Select this check box to add the sponsor of the business partner organization in which the workflow design is to the membership of this access control item.
The administrator of the domain in which the workflow design resides: Select this check box to add the administrator of the domain in which the workflow design is to the membership of this access control item.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Membership table

Lists the groups to which the access control item applies. To sort the table by a specific column, click the arrow in the column heading. The table contains these columns:

Select: Specifies a group. To select one or more groups, select the check box next to the group. To select all groups, select the check box for the entire column.
Group name: Displays the name of the group.
Description: Displays information about the intended purpose of the group.

You can use these buttons:

Add: Click to add a group to the list.
Remove: Click to remove a selected group from the list.

Click Finish when you complete this task.