Identity details¶
The Identity Details page allows you to view detailed information about an identity — including directory source information, organizational hierarchy, linked accounts, responsibilities, access models, and matched application users.
To open the Identity Details page:
- From the Identities list, select the identity you want to view. The Identity Details page is displayed.
Refer to the following sections for more information about each option:
Directory Info¶
When the Identity Details page is displayed, the Directory Info option is selected by default. This option provides more detailed directory source information about the account.
The identity's type is displayed on the right side of the page. Identity types can be helpful for sorting and filtering. They can also be used as a condition for automatic access model enrollment and as a filter when creating reviews. To change the type, see Change an identity type.
If your Permission Assist Administrators have defined additional fields, the Custom Fields section is displayed below the directory information table. This is where you capture information your directory source doesn't track — anything from an internal job level to a core banking user ID used across multiple applications. To populate or update custom field values, see Add or change custom field information.
Organization Chart¶
Selecting Organization Chart allows you to view the identity's supervisors and direct reports, if applicable. To view the details of a supervisor or direct report, select their name.
Also Known As¶
Selecting Also Known As allows you to view a list of accounts that have been consolidated with this identity. Employees often have multiple Active Directory accounts to accommodate various situations; for example, a standard account, an admin account for one or more applications, an account for a specific branch, and so on. Consolidation links all of those accounts to a single primary identity.
In the example shown below, Abel Solomon is a Human Resources Specialist. Abel has a standard Active Directory account, but he also has an additional admin account that is used to access sensitive permissions within specific applications. Using the Also Known As option, you can associate the admin account with Abel.
To consolidate accounts under a single primary identity or to detach an associated account, see Manage Also Known As accounts.
Responsibilities¶
Selecting Responsibilities on the Identity Details page allows you to see which responsibilities the identity has within Permission Assist. A red circle with a line through means the identity does not have that responsibility. A green check mark means the identity does have that responsibility.
For additional information about the responsibilities for each role, refer to the table below.
| Role | Assigned in |
|---|---|
| Administrator | The Administrator group within System Configuration > System Authentication. |
| Security Team | The Security Team group within System Configuration > System Authentication. |
| Application Manager | The Application Managers field within an application (Manage > Applications > select the application > Responsibilities tab). |
| Area Reviewer | The reviewer assignment for a Reviewable Area within an application (Manage > Applications > select the application > Reviewable Areas tab). |
| Provisioning | Either the Provision Team group within System Configuration > System Authentication, or the Provision Engineers field within an application's Responsibilities tab. |
| Reporting | The Reporting Only group within System Configuration > System Authentication. Provides read-only access to all reports under the Reports menu. |
| Supervisor | The Manage By field in Active Directory; or as the review supervisor for an application user when the application is in an open review; or as an "on behalf of" supervisor for someone else. |
| Access Model Owner | The owner setting within an access model. |
The Supervisor row of the Responsibilities option includes the "On Behalf Of" controls used to shift review responsibilities from a supervisor to another person. To assign or remove an On Behalf Of reviewer, see Manage On Behalf Of reviewers.
Access Models¶
Selecting Access Models on the Identity Details page displays a list of access models in which the identity is enrolled. To view more detailed information about one of the access models, select the access model within the list.
Applications¶
A list of applications associated with the identity is displayed in the Applications list on the right side of the page. In order for the application to show up in this list, an application user must be matched to the identity within the application's Users tab.