CA Identity Manager Implementation Guide - CA Technologies

Decide What to ManageHow to Configure User Management SupportIn CA Identity Manager, you manage users with admin roles, which determinethe CA Identity Manager tasks that administrators can perform.Note: Before implementing user management in CA Identity Manager, youshould determine which functionality you need and develop a plan (see page 58)for implementing that functionality in stages.To configure user management support, you complete the following high-levelsteps:1. Install the Identity Manager Server and Administrative tools.If you need to provision accounts to managed users, you will also need toinstall support for provisioning (see page 45).Note: See the Installation Guide for instructions.2. Create the following in the Identity Manager Management Console:■Identity Manager directoryDescribes a user store to Identity Manager. It includes the following:– A pointer to a user store, which stores managed objects such asusers, groups, and organizations.– Metadata that describes how managed objects are stored in thedirectory and represented in CA Identity Manager.■Identity Manager environmentProvides a management namespace that lets Identity Manageradministrators manage objects such as users, groups, andorganizations, with a set of associated roles and tasks. The IdentityManager environment controls the management and graphicalpresentation of a directory.For more information about Identity Manager directories and environments,see the Configuration Guide.3. Modify the default admin roles and tasks to suit your business requirements.Typical role modifications include adding or removing default tasks fromexisting admin roles, or creating new admin roles, which are based on thedefault roles.Typical task modifications include customizing the default user profile tabs toinclude only the information that you want to manage. (The default profiletabs include all attributes that are defined for users.)For information about modifying the default admin roles and tasks, see theUser Console Design Guide.4. Assign the admin roles to users who will perform user management tasks.44 Implementation Guide