In the EDP designated role concept a newer beginning of the user administration is called to assign to system users of rights to EDP systems.

Work without role concept

While it was customary years ago to give to a user rights and accesses to different systems individually it presents itself increasingly as unnecessarily errorpregnant and labor-consuming, to the tenth CAD draughtsman to give or the respected accountant the same accesses, as his colleague.

Work with role concept

One defined in a role concept depending upon (part) field a role, and assigns then (or several) roles to the user. This happens generally during the introduction of an identity management.

Example

A coworker is a CAD draughtsman and work council, needs general accesses, CAD applications, entrances to Workflow applications of the work council, entrance to news services for work councils, minutes of the meetings with the management etc. He gets thus the role of CAD draughtsmen and the role work council.

If the coworker leaves the work council, only the role work council is extracted from it, who becomes connected various rights with it all at the same time again retrogressive made, those for its job, with it, not concerned. This is not easy from safety considerations reliably and with individually assigned rights to keep.

Basic idea

• The role concept is to abstract the rights on the basis working processes, it is substantially fewer roles to a system identity management to thus give than users.
• A user and/or a job can cover several roles.
• With wrongly understood rolling finite ions the danger exists that there are more roles than coworkers, because after some time nobody knows more, which role is still actively used, and which is only unused assigned.
• Roles can be defined within an application, however likewise for groups of applications.
• Roles know roles contained (Hierari role concept)
• A role concept can be developed from daily practice, i.e. existing abstractions "exactly the same as Fr. Schmidt" are laid down in detail and formalized, subdivided if necessary in partial roles or role hierarchies.
• Role concepts are needed by the EDP, can be defined however only together with the specialist area meaningfully.

Articles in category "Role concept"

We found here 7 articles.