Found 4 topics related to this tag
Manage delegation rules for allowing users to modify specific attributes of other users. Delegation rules provide granular control over attribute-level access without requiring full administrative privileges. Features include attribute specification, member user and group management, and support for self-service delegation enabling users to manage their own attributes or those of their direct reports.
Manage individual permissions in the role-based access control system. Permissions define atomic operations on LDAP objects and attributes. Features include bind type control (permission or all), target filters, attribute restrictions, permission granting and revocation, and integration with privileges for building flexible, least-privilege access control policies.
Manage privileges that group related permissions for role assignment. Privileges aggregate permissions into meaningful units representing administrative capabilities. Features include privilege creation and modification, permission membership management, and integration with roles for implementing role-based access control (RBAC) across the IPA domain.
Manage self-service permissions allowing users to modify their own attributes. Self-service rules enable users to update specific personal information without administrative intervention. Features include attribute selection, automatic application to all users, and integration with the permission system for secure, user-initiated attribute management.