Create Administrator Profile
This scaffolding creates the administrator profile with a predefined set of rights.
To create the rights for this profile, a scaffolding list is launched inside the creation of the administrator profile.
The scaffolding generates the following scaffoldings:
- Access Review Administration Access Control Rules : Generates the permissions to administrate campaign creation.
- Assign Profile Access Control Rules : Gives to a given profile the rights to create, update, delete and query any assigned profile.
- Basket Rules Control Rules : Generates the permissions to execute the different requests to display the information in the rights basket.
- Connector Resource Type Access Control : Gives the rights to create and update resource types, generate provisioning orders and fulfill from the connector screen.
- Connectors Access Control Rules: Gives the permissions to manage the connector pages.
- Create Connectors Jobs : Creates all jobs by connector to launched task in the connector page.
- Create Resource Incremental Access Control Rules : Generates the access control rule which gives to a profile the permission to query the resources modified incrementally
- Job Execution Access Control Rules : Assigns a set of rights to a given profile to execute any job, and view all job instances, task instances and logs.
- Manage Accounts :
- Manage Setting Access Control Rule : Generates the access control rule which gives to a profile the permission to query, create, update and delete settings from the UM_Settings table.
- Monitoring Administration Access Control Rules : Generates the access control rule which gives to a profile the permission to query the monitoring screen.
- Perform Manual Provisioning Access Control Rules : Generates the permissions to access the manual provisioning pages for a given entity type and profile.
- Profile Administration Access Control Rules : Gives to a given profile the rights to create, update and delete profiles.
- Provisioning Access Control Rules : Generates the execution rights for Provisioning and Fulfillment tasks for a given profile.
- Reconciliate Roles Access Control Rules : Generates the permissions to access the resource reconciliation pages for a given entity type and profile.
- Reconciliate Roles Access Control Rules : Generates the permissions to access the role reconciliation pages for a given entity type and profile.
- Redundant Assignment Access Control Rule : Generates the permissions to access the Redundant Assignment page, to analyze and remove redundant assignments.
- Report Access Control Rules : Generates the permissions to access the report view.
- Resource Api Administration : Generates the permissions to create/update/delete/query resources from a given entity type, for a given profile.
- Resource Picker Control Rules : Creates the reading right of the resource picker.
- Resource Type Mapping Control Rules : Generate rights to launch agent fulfillment.
- Review Provisioning Access Control Rules : Generates the permissions to access the provisioning review pages for a given entity type and profile.
- Review Roles Access Control Rules : Generates the permissions to access the role review pages for a given entity type and profile.
- Risks Administration Access Control Rules :
- Role Administration Access Control Rules : Generates the permissions to access the configuration pages and create, update, delete the elements of the role model.
- Role Naming Access Control Rules : Generates the permissions to configure and launch the automatic creation of roles and rules based on naming conventions.
- Settings Access Control Rules : Generates the permissions to configure the Workforce Core Solution module and connector settings.
- Simulation Access Control Rules : Generates the permissions to configure and launch simulations.
- Synchronization Access Control Rules : Generates rights to launch synchronization task.
- Task Administration Access Control Rules : Generates all rights to have the access to job administration page.
- Universe Access Control Rules : Generates an access control rule which gives a profile the permission to access the query page and run queries.
- View History Resource Template : Generates an access control rule giving to the specified profile the permission to browse the resources history of the specified entity type.
- Workflow Configuration Control Rules :
- Workflow Fulfillment Control Rules : Generates the execution rights to launch Fulfillment workflow for a given profile.
- Workflow Overview Control Rules : Generates the permissions to access the workflow supervision page.
Examples
<CreateAdministratorProfile EntityType="Directory_Guest"> <DisplayNameProfile Identifier="en-EN" Value="Administrator" /> <DisplayNameProfile Identifier="fr-FR" Value="Administrateur" /> </CreateAdministratorProfile>
Properties
| Property | Details |
|---|---|
| EntityType optional | Type String Description Identifier of the entity type involved in the scaffolding. |
Child Elements
- Display Name Profile (optional) defines a display name for the administrator profile for a given language.
Display Name Profile
| Property | Details |
|---|---|
| DisplayName required | Type String Description Display name of the profile in the related language. |
| Identifier required | Type String Description Code of the language for the display name. |
Generated XML
Our example generates the following configuration:
<Profile Identifier="Administrator" DisplayName_L1="Administrator" DisplayName_L2="Administrateur" /><AccessReviewAdministrationAccessControlRules Id="46" Profile="Administrator" /><AssignProfileAccessControlRules Id="47" Profile="Administrator" /><BasketRulesControlRules Id="48" Profile="Administrator" /><ConnectorResourceTypeAccessControl Id="5" Profile="Administrator" /><ConnectorsAccessControlRules Id="49" Profile="Administrator" /><CreateResourceIncrementalAccessControlRules Id="51" Profile="Administrator" /><JobExecutionAccessControlRules Id="212" Profile="Administrator" /><MonitoringAdministrationAccessControlRules Id="215" Profile="Administrator" /><PerformManualProvisioningAccessControlRules Id="216" EntityType="Directory_Guest" Profile="Administrator" /><ProfileAdministrationAccessControlRules Id="218" Profile="Administrator" /><ProvisioningAccessControlRules Id="219" Profile="Administrator" /><ReconciliateResourcesAccessControlRules Id="220" EntityType="Directory_Guest" Profile="Administrator" /><ReconciliateRolesAccessControlRules Id="222" EntityType="Directory_Guest" Profile="Administrator" /><ReportAccessControlRules Id="224" Profile="Administrator" /><ResourceApiAdministration Id="225" EntityType="Directory_Guest" Profile="Administrator" /><ResourcePickerControlRules Id="227" Profile="Administrator" /><ResourceTypeMappingControlRules Id="228" Profile="Administrator" /><ReviewProvisioningAccessControlRules Id="229" EntityType="Directory_Guest" Profile="Administrator" /><ReviewRolesAccessControlRules Id="231" EntityType="Directory_Guest" Profile="Administrator" /><RisksAdministrationAccessControlRules Id="233" Profile="Administrator" /><RoleAdministrationAccessControlRules Id="8" Profile="Administrator" /><RoleNamingAccessControlRules Id="234" Profile="Administrator" /><SimulationAccessControlRules Id="235" Profile="Administrator" /><SynchronizationAccessControlRules Id="236" Profile="Administrator" /><TaskAdministrationAccessControlRules Id="14" Profile="Administrator" /><ViewHistoryResourceTemplate Id="314" EntityType="Directory_Guest" Profile="Administrator" /><WorkflowAspect Id="316" Profile="Administrator" /><WorkflowConfigurationControlRules Id="317" Profile="Administrator" /><WorkflowFulfillmentControlRules Id="335" Profile="Administrator" /><WorkflowOverviewControlRules Id="336" EntityType="Directory_Guest" Profile="Administrator" />