Minimal Permissions for Analyzer Tool?

Question

I'm running version 7.1.2 and I have a need to give someone access to the Analyzer tool to compare Group memberships and create Business Roles. I cannot find a role to give that type of granular permissions. Does anyone know what role may fill that need? 
 Thanks! 
 -CK

Markus Weiss-Ehlers · Accepted Answer

Speaking generally, you need the permissions to read all the objects (business roles, departments, group memberships ) you include in your analysis and of course you need to be able to write business roles. 
 The easiest way to give somebody the necessary read access to all group memberships (sadly to more objects as well, but read-only) is the application role "Identity & Access Governance\Auditors"

Tomi Kääriäinen · Answer

There are two roles that give the permission to insert orgs. They are "Base roles\Employee Managers" and "Identity Management\Business roles\Administrators". None of these gives the full rights to do everything that Analyzer would be capable of doing, but they might be enough for the described case. Otherwise one needs to create a custom role and a group. 
 Your welcome

Endpoint Privilege Management

Minimal Permissions for Analyzer Tool?

Top Replies