Membership

Use this page to change which users the access control item governs.

The fields vary, depending on the protection category that you specified on the General page. The protection categories are:

Account

Select one or more of the following choices as the focus for the account entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The account owner: Select this check box to add the account owner to the membership of this ACI.
The manager of the account owner: Select this check box to add the manager of the account owner to the membership of this ACI.
The owner of the service that the account resides on: Select this check box to add the owner of the service on which the account resides to the membership of this ACI.
The owner of any access defined on the service that the account resides on: Select this check box to add the owner of the access that is defined on the service on which the account resides to the membership of this ACI.
The sponsor of the business partner organization in which the account resides: Select this check box to add the sponsor of the business partner organization in which the account resides to the membership of this ACI.
The administrator of the domain in which the account resides: Select this check box to add the administrator of the domain in which the account resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Account Default Template

Select one or more of the following choices as the focus for the account default template entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the account default template resides: Select this check box to add the supervisor of the business unit in which the account default template resides to the membership of this ACI.
The owner of the service for which account defaults are being defined: Select this check box to add the owner of the service for which account defaults are being defined to the membership of this ACI.
The owner of any access defined on the service for which account defaults are being defined: Select this check box to add the owner of the access that is defined on the service for which account defaults are being defined to the membership of this ACI.
The sponsor of the business partner organization in which the account default template resides: Select this check box to add the sponsor of the business partner organization in which the account default template resides to the membership of this ACI.
The administrator of the domain in which the account default template resides: Select this check box to add the administrator of the domain in which the account default template resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Admin Domain

Select one or more of the following choices as the focus for the admin domain entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the admin domain resides: Select this check box to add the supervisor of the business unit in which the admin domain resides to the membership of this ACI.
The sponsor of the business partner organization in which the admin domain resides: Select this check box to add the sponsor of the business partner organization in which the admin domain resides to the membership of this ACI.
The administrator of the admin domain: Select this check box to add the administrator of the admin domain to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Business Partner Organization

Select one or more of the following choices as the focus for the business partner organization entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the business partner organization resides: Select this check box to add the supervisor of the business unit in which the business partner organization resides to the membership of this ACI.
The sponsor of the business partner organization: Select this check box to add the sponsor of the business partner organization to the membership of this ACI.
The administrator of the domain in which the business partner organization resides: Select this check box to add the administrator of the domain in which the business partner organization resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Business Partner Person

Select one or more of the following choices as the focus for the business partner person entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The profile owner: Select this check box to add the profile owner to the membership of this ACI.
The manager of the profile owner: Select this check box to add the manager of the profile owner to the membership of this ACI.
The sponsor of the business partner organization in which the business partner person resides: Select this check box to add the sponsor of the business partner organization in which the business partner person resides to the membership of this ACI.
The administrator of the domain in which the business partner person resides: Select this check box to add the administrator of the domain in which the business partner person resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Dynamic Organizational Role

Select one or more of the following choices as the focus for the dynamic organizational role entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the dynamic organizational role resides: Select this check box to add the supervisor of the business unit in which the dynamic organizational role resides to the membership of this ACI.
The owners of the role: Select this check box to add one or more role owners to the membership of this ACI.
The sponsor of the business partner organization in which the dynamic organizational role resides: Select this check box to add the sponsor of the business partner organization in which the dynamic organizational role resides to the membership of this ACI.
The administrator of the domain in which the dynamic organizational role resides: Select this check box to add the administrator of the domain in which the dynamic organizational role resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Global Operation

Select one or both of the following choices as the focus for the Global operation that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this access control item. When you select this item, all other items are unavailable.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this access control item. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Identity Manager User

Select one or more of the following choices as the focus for the Identity Manager user entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The Identity Manager user: Select this check box to add the Identity Manager user to the membership of this ACI.
The manager of the Identity Manager user: Select this check box to add the manager of the Identity Manager user to the membership of this ACI.
The owner of the Identity Manager service: Select this check box to add the owner of the Identity Manager service to the membership of this ACI.
The sponsor of the business partner organization in which the Identity Manager user resides: Select this check box to add the sponsor of the business partner organization in which the Identity Manager user resides to the membership of this ACI.
The administrator of the domain in which the Identity Manager user resides: Select this check box to add the administrator of the domain in which the Identity Manager user resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Identity Policy

Select one or more of the following choices as the focus for the identity policy entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the identity policy resides: Select this check box to add the supervisor of the business unit in which the identity policy resides to the membership of this ACI.
The sponsor of the business partner organization in which the identity policy resides: Select this check box to add the sponsor of the business partner organization in which the identity policy resides to the membership of this ACI.
The administrator of the domain in which the identity policy resides: Select this check box to add the administrator of the domain in which the identity policy resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

ITIM Group

Select one or more of the following choices as the focus for the ITIM group entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the ITIM group resides: Select this check box to add the supervisor of the business unit in which the ITIM group resides to the membership of this ACI.
The sponsor of the business partner organization in which the ITIM group resides: Select this check box to add the sponsor of the business partner organization in which the ITIM group resides to the membership of this ACI.
The administrator of the domain in which the ITIM group resides: Select this check box to add the administrator of the domain in which the ITIM group resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Location

Select one or more of the following choices as the focus for the location entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the location: Select this check box to add the supervisor of the location to the membership of this ACI.
The sponsor of the business partner organization in which the location resides: Select this check box to add the sponsor of the business partner organization in which the location resides to the membership of this ACI.
The administrator of the domain in which the location resides: Select this check box to add the administrator of the domain in which the location resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Organizational Unit

Select one or more of the following choices as the focus for the organizational unit entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the organizational unit: Select this check box to add the supervisor of the organizational unit to the membership of this ACI.
The sponsor of the business partner organization in which the organizational unit resides: Select this check box to add the sponsor of the business partner organization in which the organizational unit resides to the membership of this ACI.
The administrator of the domain in which the organizational unit resides: Select this check box to add the administrator of the domain in which the organizational unit resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Password Policy

Select one or more of the following choices as the focus for the password policy entity access that is governed by this access control item.

All users in the system: When you select this item, all other items are unavailable.
The supervisor of the business unit in which the password policy resides: Select this check box to add the supervisor of the business unit in which the password policy resides to the membership of this ACI.
The sponsor of the business partner organization in which the password policy resides: Select this check box to add the sponsor of the business partner organization in which the password policy resides to the membership of this ACI.
The administrator of the domain in which the password policy resides: Select this check box to add the administrator of the domain in which the password policy resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Person

Select one or more of the following choices as the focus for the person entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The profile owner: Select this check box to add the profile owner to the membership of this ACI.
The manager of the profile owner: Select this check box to add the manager of the profile owner to the membership of this ACI.
The sponsor of the business partner organization in which the person resides: Select this check box to add the sponsor of the business partner organization in which the person resides to the membership of this ACI.
The administrator of the domain in which the person resides: Select this check box to add the administrator of the domain in which the person resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Provisioning Policy

Select one or more of the following choices as the focus for the provisioning policy entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the provisioning policy resides: Select this check box to add the supervisor of the business unit in which the provisioning policy resides to the membership of this ACI.
The sponsor of the business partner organization in which the provisioning policy resides: Select this check box to add the sponsor of the business partner organization in which the provisioning policy resides to the membership of this ACI.
The administrator of the domain in which the provisioning policy resides: Select this check box to add the administrator of the domain in which the provisioning policy resides to the membership of this ACI.
Users who are members of these groups: Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Recertification Policy

Select one or more of the following choices as the focus for the recertification policy entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Report

Select one or more of the following choices as the focus for the report entity access that is governed by this access control item.

Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Separation of Duty Policy

Select one or more of the following choices as the focus for the separation of duty policy entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The owner of the policy: Select this check box to add the policy owner to the membership of this ACI.
The supervisor of the business unit in which the separation of duty policy resides: Select this check box to add the supervisor of the business unit in which the separation of duty policy resides to the membership of this ACI.
The sponsor of the business partner organization in which the separation of duty policy resides: Select this check box to add the sponsor of the business partner organization in which the separation of duty policy resides to the membership of this ACI.
The administrator of the domain in which the separation of duty policy resides: Select this check box to add the administrator of the domain in which the separation of duty policy resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Service

Select one or more of the following choices as the focus for the service entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the service resides: Select this check box to add the supervisor of the business unit in which the service resides to the membership of this ACI.
The owner of the service: Select this check box to add the service owner to the membership of this ACI.
The owner of any access defined on the service: Select this check box to add the owner of the access that is defined on the service to the membership of this ACI.
The sponsor of the business partner organization in which the service resides: Select this check box to add the sponsor of the business partner organization in which the service resides to the membership of this ACI.
The administrator of the domain in which the service resides: Select this check box to add the administrator of the domain in which the service resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Service Group

Select one or more of the following choices as the focus for the service group entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the service group resides: Select this check box to add the supervisor of the business unit in which the service group resides to the membership of this ACI.
The owner of the service on which the groups exist: Select this check box to add the owner of the service on which the groups exist to the membership of this ACI.
The owner of any access defined on a group: Select this check box to add the owner of the access that is defined on the group to the membership of this ACI.
The sponsor of the business partner organization in which the service group resides: Select this check box to add the sponsor of the business partner organization in which the service group resides to the membership of this ACI.
The administrator of the domain in which the service group resides: Select this check box to add the administrator of the domain in which the service group resides to the membership of this ACI.
Users who are members of these groups: Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Service Selection Policy

Select one or more of the following choices as the focus for the service selection policy entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the service selection policy resides: Select this check box to add the supervisor of the business unit in which the service selection policy resides to the membership of this ACI.
The sponsor of the business partner organization in which the service selection policy resides: Select this check box to add the sponsor of the business partner organization in which the service selection policy resides to the membership of this ACI.
The administrator of the domain in which the service selection policy resides: Select this check box to add the administrator of the domain in which the service selection policy resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Static Organizational Role

Select one or more of the following choices as the focus for the static organizational role entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the static organizational role resides: Select this check box to add the supervisor of the business unit in which the static organizational role resides to the membership of this ACI.
The owners of the role: Select this check box to add one or more role owners to the membership of this ACI.
The sponsor of the business partner organization in which the static organizational role resides: Select this check box to add the sponsor of the business partner organization in which the static organizational role resides to the membership of this ACI.
The administrator of the domain in which the static organizational role resides: Select this check box to add the administrator of the domain in which the static organizational role resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Workflow Design

Select one or more of the following choices as the focus for the workflow design entity access that is governed by this access control item.

All users in the system: Select this check box to add all users to the membership of this ACI. When you select this item, all other items are unavailable.
The supervisor of the business unit in which the workflow design resides: Select this check box to add the supervisor of the business unit in which the workflow design resides to the membership of this ACI.
The sponsor of the business partner organization in which the workflow design resides: Select this check box to add the sponsor of the business partner organization in which the workflow design resides to the membership of this ACI.
The administrator of the domain in which the workflow design resides: Select this check box to add the administrator of the domain in which the workflow design resides to the membership of this ACI.
Users who are members of these groups: Select this check box to add users who are members of the specified groups to the membership of this ACI. Select one or more groups from the table. You can also add or remove groups. Click Add to add a group of users, or click Remove to remove a group of users.

Group Membership table

Lists the groups to which the access control item applies. To sort the table by a specific column, click the arrow in the column heading. The table contains these columns:

Select: Specifies a group. To select one or more groups, select the check box next to the group. To select all groups, select the check box at the top of the column.
Group Name: Displays the name of the group.
Description: Displays information about the intended purpose of the group.

You can use these buttons:

Add: Click to add a group to the list.
Remove: Click to remove a selected group from the list.

Click other tabs to specify additional information. Then, either click OK to save the changes or Apply to save your changes and continue.