Identity Director Administration Guide

Home 

Configure Delegated Administration

In the Management Portal at Setup > Delegated Administration, configure Delegated Administration panels. This allows you to delegate control to users, so they can request and cancel services in the Web Portal for other users. Delegated administration is useful for users with a specific role within your organization. For example, you can configure delegated administration panels in which services are organized by customer-site, with subcategories for applications, user management, printer management, etc.

  • If you make changes to a delegated administration panel, users first experience this after their next sign-in.
  • People may have access to multiple panels.

Properties tab

On the Properties tab, you can set the general properties of the delegated administration panel.

Field Explanation and Tips
Access policy Specify who has access to the delegated administration panel.
Best practice is to make delegated administration panels available only to a limited number of people, for example team leaders or managers.
  • Select Everyone has access to grant everyone in your environment access to the delegated administration panel.
  • Select Only allow access for people subscribed to this service to let access to the delegated administration panel depend on subscription to a specific service.
Settings Specify which tabs are shown in the delegated administration panel.
Clear Show People tab or Show Services tab to hide them in the delegated administration panel. This does not affect the scopes of these tabs:
  • If you hide the People tab, users can still request or cancel services from the Services tab, but only for people within the scope of the People tab.
  • If you hide the Services tab, users can still request or cancel services from the People tab, but only services within the scope of the Services tab.
Set default tab Specify on which tab the delegated administration panel opens when a user accesses it.
This can help users focus on the task they need to do.
It may also improve performance in environments with many users: if you change the default tab to Services, it is not necessary to load all users before delegated administration functionality is available.
This option is only available if you select both Show People tab and Show Services tab.

People tab

On the People tab, you can specify the Configure smart rules or the Organization context that determines for whom services can be requested.

Button Function
Toggle include/exclude subitems Include (default) or exclude subitems of the selected organization context item. If subitems are included, the name is followed by \*
Arrow up Arrow down Change the order in which organization context is displayed in the Delegated Administration panel.

Services tab

On the Services tab, you can specify the categories from which services can be requested.

Button Function
Toggle include/exclude subitems Include (default) or exclude subitems of the selected category. If subitems are included, the name of the category is followed by \*
Arrow up Arrow down Change the order in which categories are displayed in the Delegated Administration panel.

Diagnostics tab

On the Diagnostics tab, you can view who has access to the delegated administration panel.

If you selected Only allow access for people subscribed to this service as the Access policy (on the Properties tab), this tab displays a list of people who subscribed to the service.

 

The availability of Delegated Administration may be subject to the license type used in your environment.

See also

Was this article useful?