Wednesday, July 1, 2020

Eligible type and active type

Eligible type: 

A role assignment that requires a user to perform one or more actions to use the role.
If a user has been eligible for a role, that means they can activate the role when they activate the role when they need to perform privileged tasks.

There's no different in the access given to someone with a permanent versus an eligible role assignment.

The only difference is that some people dont need that access all the time.

You can choose from two assignment duration options for each assignment type ( eligible and active ).

when you configure settings for a role. These options become the default maximum duration when a user is assigned to the role in Privileged Identity Management.

Use the activation maximum duration slider to set the maximum time, in hours, that a role stays active before it expires. This value can be from one to 24 hours.

Active type:

A role assignment that doesn't require a user to perform any action to use the role. Users assigned as active have the privileges assigned to the role.






















No comments:

Post a Comment