CA Identity Manager Implementation Guide - CA Technologies

Task Optimizations■A user accesses a relationship tabA relationship tab is any tab where a user can view or manage aone-to-many relationship between the task's subject and a set ofentitlements. An example of a relationship tab is the Admin Roles tab, whichdisplays the roles that a user has.■A user adds objects on a relationship tabFor example, Identity Manager performs additional security checks when auser adds additional roles to another user on the Admin Roles tab.Task performance is affected by the following:■■Task scope, which determines where an administrator can use a taskRelationship tabs, which display an object's relationship to other objectsTask Scope Evaluation and PerformanceWhen an administrator uses an admin task that involves searching for amanaged object, such as a user, group, organization, task, or role, IdentityManager evaluates and applies task scope rules. These rules can significantlyimpact the amount of time Identity Manager takes to display the list of objects toselect for the task.Note: Unlike member, admin, and owner policy evaluations, information aboutscope rule evaluations is not stored in a cache.Task scope is determined by the following:■■■The type of object that the task manages.Scope rules that apply to the admin role that includes the task. Scope rulesare defined in member, owner, and admin policies.Any user-defined search criteria.For example, consider a Modify User task, which is included in the User Managerrole. The User Manager role has a member policy with a scope rule that allowsUser Managers to manage users in the Employees organization. An administratoropens the Modify User task and enters the search criteria: Last Name starts withA. In this case, the scope for the Modify User task is all users in the Employeesorganization whose last name starts with A.How Identity Manager Renders Relationship TabsA relationship tab allows users to view and manage the relationship that a task'ssubject has with a set of entitlements. For example, the Provisioning Roles tabshows the provisioning roles that a user has.78 Implementation Guide