Permission

You are here:System Administration > Identity > Identity

Permission

The Permission administration maintenance document is used to create new permissions or edit existing ones. The Permission Lookup allows you to search for and view existing permissions. You can view summarized information about the permission detail values as well as the roles that are currently associated with this permission.

The Permission Info section identifies the permissions with a unique system-assigned ID number, a template, namespace, name and description.

The Permission Details section identifies the permission values that KIM needs to make this permission function. These values vary greatly depending on the type of permission being created. It is highly recommended that users view similar permissions (those with the same Template ID) and discuss Permission Details with technical resources to ensure values are entered correctly.

Extreme caution should be exercised when modifying existing permissions or adding new ones. Even small changes can have application-wide consequences. Changes should be made only after sufficient testing with your local configuration. Typically, the Permission document does not route for approval and is only used by members of the System Manager or Technical Administrator roles to create new or modify existing records.

Document Layout

Figure 2183 Permission Administration Maintenance Document Example

Table 1182 Permission Administration Maintenance Document – Permission Info & Details Sections - Field Descriptions

Field	Description
Permission Info
Permission Identifier	A numeric, system-assigned value that uniquely identifies the permission record in the database table.
Template Id	Select the Template this permission is associated with from the list. Templates identify broad permission types. Use the drop-down menu by clicking the down arrow to display the list, and then click on an item in the list to highlight and select it to populate the box with your selection.
Permission Namespace	Select the namespace option from the list to specify the associated module. A namespace is an indicator that associates the permission with a particular application and module. Use the drop-down menu by clicking the down arrow to display the list, and then click on an item in the list to highlight and select it to populate the box with your selection.
Permission Name	Enter a textual name for the permission as it is commonly referred to.
Permission Description	This may be the same as the Permission Name field. It exists to allow for further explanation of the purpose of the permission.
Active Indicator	Required (defaults to 'Yes'). Change the default selection if you wish this permission to be inactive. Inactive permissions will be disregarded by KIM when doing permission checks. Select to make active, uncheck to deactivate. Click within the checkbox to select the item. A check mark appears within the checkbox to indicate the item is selected. Click within the checkbox again to clear the mark and deselect the item.
Permission Details
Permission Details	The parameters associated with the permission (for example, sectionName=reviewComments). Click within the text box (or press the tab key from a previous field) to relocate the cursor to the field, and then type (or paste from virtual clipboard) to enter text in the box as necessary to provide the appropriate information. Optional (though most permissions would require some details to be functional). Enter the permission details specific to this permission. Details should be entered as the name of the property followed by an '=' followed by the value of the property. When entering multiple details they should be separated by a hard return in the text box, such as: componentName=IdentityManagementPersonDocument

Examples

Figure 2184 Permission Administration Maintenance Document Example Values

Common Features

This maintenance document includes the following features that are common to most KC maintenance documents:

Table 1183 Links to Common Maintenance Document Component Instructions

Common Maintenance E-Doc Component	Cross-Reference Links To Usage Instructions
Document Header	For more information, see “Header Area” on page Error! Bookmark not defined. in E-Doc Fundamentals.
Document Overview Section	For more information, see “Document Overview” on page 94 in Common E-Doc Tabbed Sections.
Notes and Attachments Section	For more information, see “Notes and Attachments” on page 95 in Common E-Doc Tabbed Sections.
Ad Hoc Recipients Section	For more information, see “Ad Hoc Recipients” on page 97 in Common E-Doc Tabbed Sections.
Route Log Section	For more information, see “Route Log” on page 98 in Common E-Doc Tabbed Sections.
Action Buttons	For more information, see “Action Buttons” on page 71 in Selection, Entry and Action Tools.

Process

For information about searching for, initiating, editing, copying, submitting, saving, closing, canceling, and/or routing a maintenance document, see “Common Maintenance E-Doc Operations” on page Error! Bookmark not defined. in the Overview section.