150 likes | 316 Vues
What is a Delegation?. A Delegation is: The act of giving an appropriate representative the ability to manage user access to applications Performed by Application Administrator. Why Delegate?. Delegations are efficient & effective
E N D
What is a Delegation? • A Delegation is: • The act of giving an appropriate representative the ability to manage user access to applications • Performed by Application Administrator
Why Delegate? • Delegations are efficient & effective • Efficient – now others can establish appropriate End User access to an application • Effective – now others hold & share responsibility • Client may determine their own end user access
Delegation Scenario – Part A • Jill Smith is an Application Admin for IAPP • Jill wants clients to manage their own End User access in IAPP • She sees delegation as an opportunity to do this • What she knows… • The “Northern Weed Committee” needs access to IAPP now • They are in need of the functions of the “Program Manager” Profile
Delegation Scenario – Part B • What can Jill do? • Delegate! • Jill logs on to ADAM as an Application Admin for IAPP • She completes the following delegation for Jack Black
Delegation Access in ADAM • Jill = Application Administrator • Jack = Authorization Grantor
Demo • Demonstration of: • Add Delegation
Add a New Delegation (cont.) • Tips • Do NOT create a delegation with “Grant Any Organization” selected for a BCeID User ID • The “Enabled” check box must be ticked for the delegation to be active as of the Effective Date • Comments can be seen by others • The Authorization Grantor receives an email notification of the Delegation
Add a Batch Delegation • What if I have many identical delegations to create? • ADAM has a Batch Delegation page • Allows: • Entry of multiple identical delegations; or, • File upload of multiple delegations
Add a Batch Delegation (cont.) • Batch Delegation Details • Similar fields to a single delegation • May enter multiple: • Users • Organizations • Profiles
Demo • Demonstration of: • Add Batch Delegation
Add a Batch Delegation (cont.) • Tips • Delegation Processing Confirmation page • Is delegation approved? • Remove tick if you do not want to add the corresponding delegation • If the delegation is not approved by ADAM, you can roll your mouse over the delegation (blue text) and an explanation is displayed • Use “Complete” button to add all selected delegations • Authorization Grantors receive email notification of delegation • Note: Email is sent to each Authorization Grantor for each profile. Could be many emails sent
Manage Delegations • Manage Delegations page allows: • Search for delegations • Modify details of delegation • Examine delegation history • Delete delegation • There can be more than one Application Admin for an application • You can view/update delegations which you did not create (i.e. as long as you have the same level of delegation authority)
Demo • Demonstration of: • Update Delegation
Manage Delegations (cont.) • Tips • Do not delete a delegation unless you are sure you want to delete it from ADAM • Use the enable checkbox (remove the tick) to temporarily disable the delegation • Once you have deleted a delegation, you will still be able to see it on the Manage Delegations page (for historical purposes only) Next Presentation: Working with Authorizations