Brief Description
Roles and role assignment are unlikely to remain static for any length of time. Because of this, they must be managed – the entitlements associated with a role must be reviewed and updated and the users assigned the role, implicitly or explicitly, must be reviewed and changed. The business processes used to effect these reviews and changes are collectively referred to as role management (sometimes enterprise role management).
Generic Functional Requirements
Support for:
- Simple roles - sometimes called application roles
- Enterprise roles - roles that span multiple systems
- Encapsulated or layered roles - a layered role may be a business role which includes one or many application roles
- Implicit and Explicit roles
- Role mining