Allow or Deny Entitlement Role Permissions

To change the privileges allowed or denied with a role, complete the following steps:

1. From the Entitlement Roles list, select the Entitlement Role you want to change. The role's detail page is displayed.

2. Within the Applications tab (which is displayed by default), select the application you want to change within the list. The details panel is displayed (see picture below).

   

3. For each privilege within the application, select one of the following options:

   Option:		Description:
   	Allow	Select this option if you want Identities with this role to be allowed access to the privilege.
   	Deny	Select this option if you do not want Identities with this role to have access to the privilege.
   	Reset	To reset the privilege to neither allowed nor denied, select the dot between the Allow and Deny options.

    

4. To save time, privileges can be filtered by selecting the Filter button and selecting one of the following options:

   Filter	Action
   Only Recommended	Shows privileges that are most common (based on a calculation; typically, it means participation is 75% more)
   Only New	Shows privileges that are new as of the last import
   Hide Unused	Hides privileges that aren't being used (have 0% participation)
   Show Absent	Shows privileges that have been seen before but are now absent

    

5. As changes are made, the number of changes is displayed to the right of the application name (see picture below).

   

6. When all changes to the application are complete, commit the changes.