Export mined roles

Edit online

Detailed steps to import the role mining data into IVIG Role Optimizer.

Export the mined roles

  1. Execute Role Mining operation in IBM® Verify Identity Governance Role Optimizer.
  2. Go to Role Optimizer → Manage → Role Mining → Analysis, select the role mining details. The output of role mining is represented by a set of candidate roles in this section.
  3. Select the desired roles to be exported from IVIG Role Optimizer into a report. The report can be utilized to refer the details of the candidate roles to be created in IVIG.
  4. Generate "Candidate Role - Entitlement List" and "Candidate Role - User List" reports in IVIG Role Optimizer.
  5. Login to IBM® Verify Identity Governance.
    1. Navigate to Manage Roles → Create Role.
    2. Select Organizational Role for the role type.
    3. Specify the Role Name. (Refer the "Candidate Role" column in "Candidate Role - Entitlement List" report, for example, consider Candidate Role "role_1".)
    4. Provide an optional description.
    5. Select the membership type and scope/Business unit of the role as required.
    6. Specify other role attributes such as owner, access information and assignment attributes.

    7. For role composition in IVIG, refer the "Candidate Role - Entitlement List" report generated above. Select the entitlements from "Entitlement Name" column corresponding to the desired candidate role in the report.

      For example, consider entitlements 'Supervisor' and 'Operator' are corresponding to the Candidate Role "role_1" selected above. Select these entitlements from the list of available entitlements displayed.

    8. After the role is created, refer the "Candidate Role - User List" report; look for the "UserID" column corresponding to the selected role. Add these users as the role members of the generated roles.

      For example, consider users with UserID 'scott' and 'jessica' are associated with Candidate Role "role_1" selected above. Add 'scott' and 'jessica' as the role members for the role "role_1".

    9. Repeat steps 5a to 5h for creating other similar roles.