Show TOC

Function documentationDerive Roles Locate this document in the navigation structure

 

Use Derive Roles to derive additional roles with different organizational levels and values based on the authorization data added to a master role.

You can create different types of derived roles as follows:

  • A derived role without using an existing organizational value map

  • A derived role using an organizational value map that was created during configuration.

Note Note

For more details on creating organization value maps, see the Access Control Configuration documentation.

End of the note.

Features

  • Use Create to create a new derived role from the master role you selected.

  • Use Change to modify an existing derived role.

    This derived role was previously created with a master role.

  • Use Delete to delete an existing derived role.

  • Use Generate to generate selected derived roles.

  • Use Save to save the derived role and move to the next role management phase.

  • Use Back to Role Definition to return to role creation/change screen.

Note Note

Whenever you want to bypass a phase, you can simply enter the phase and choose   Save   Back to Role Definition  

End of the note.

Activities

To view the following activities, choose the Derive Role tab. The Role Derivation screen opens.

Creating a Derived Role

  1. Select the Derive Role tab.

    The Role Derivation screen opens.

    • The screen displays all existing derived roles that are associated with the master role.

    • If no derived roles exist, the screen is blank.

  2. To change or delete any existing role, select the role.

    Choose Change or Delete.

  3. To create a new derived role, choose Create.

  4. Enter the primary organization level and value or values, the role name, and the role description.

  5. Choose Continue.

    Note Note

    The default name for Profile is SYS GEN 1. To change this default profile name, enter a new name. If you do not enter a value for Profile, the system generates a name when it generates the derived role.

    End of the note.

  6. To derive the role without using an organization map, choose Continue.

  7. To derive the role with an organization map, select an organization value map.

    The screen displays organization value map, or maps that match the primary organization value you specified for the new derived role:

    • If the system finds an existing organization map that matches the primary organization value you specify for the new derived role, it displays all organizational levels and values for that map in the Process Org. Level Field screen.

    • If the system cannot find existing organizational value map, or maps, the Process Org. Level Fields screen appears; however, you must set the organization levels and values on this screen.

  8. Choose Save. The system returns to the Role Derivation screen.

  9. You can now create new derived roles. Or, choose the Back to Role Definition pushbutton to proceed to the next phase in the role creation process.