PingOne Advanced Identity Cloud

Navigation menu supplementary information

Advanced Identity Cloud uses the following display logic to determine which menu items to display in the navigation menu for a given end user:

  1. Profile selection: The UI determines which navigation profile to use for the end user based on their group membership:

    • If an end user is assigned to a single navigation profile, the UI uses that profile.

    • If an end user is assigned to multiple navigation profiles, the UI uses the first of these profiles when ranked in ascending order.

    • If an end user isn’t assigned to any navigation profiles, the UI uses the fallback configuration in the hosted pages theme that’s been configured for the end user. This could be the realm default theme or an override theme that’s been specified using a themeId parameter in the URL.

  2. For the selected navigation profile (or the fallback configuration in a hosted pages theme), the menu items displayed by the UI depend on several further factors:

The following table summarizes the behavior of the navigation menu items that are available as standard in the hosted account pages:

Menu item Visibility Description

dashboard Dashboard

Displays tasks and information that require the end user’s attention.

apps Applications

Lets the end user view and access their applications. Displays SAML-based applications and Bookmark applications, but not OAuth 2.0 applications.

person Profile

Lets the end user view and edit their account profile, including personal information.

The actions available on this page vary depending on the configurations set in Configure actions and information for end users.

summarize Reports

Lets the end user view any reports shared with them by a tenant administrator.

vpn_key Alpha realm - Assignment
 or
vpn_key Bravo realm - Assignment

  • Visible based on delegated administrator privileges. Requires the end user to be assigned to an internal role that has at least the view privilege for the role identity type. Learn more in Enable delegated administrator menu items.

  • Organization and user menu items also visible based on organization privileges (being an organization administrator, owner, or member).

  • Can be individually hidden via configuration. Learn more in Change menu item visibility.

Lets the end user access the management interface for the identity type.

group Alpha realm - Group
 or
group Bravo realm - Group

domain Alpha realm - Organization
 or
domain Bravo realm - Organization

assignment_ind Alpha realm - Role
 or
assignment_ind Bravo realm - Role

people Alpha realm - User
 or
people Bravo realm - User

people Internal Role

The following table summarizes the behavior of the navigation menu items that are available with add-on capabilities in the hosted account pages:

Menu item Visibility Description

inbox My Inbox

Submenu items:

  • Approvals

  • Tasks

  • Access Reviews

  • Violations

  • Visible by default with Identity Governance[1].

  • Menu items and submenu items can be individually hidden via configuration. Learn more in Change menu item visibility.

Displays all items assigned to an end user.

This includes:

  • Any approval items (submitted access requests) for an approver (designated owner) to act on.

  • Any tasks assigned to the end user.

  • Any access reviews assigned to a certifier (individual assigned to review the access).

  • Any policy violations that require the end user’s attention.

lock My Access

Submenu items:

  • My Accounts

  • My Roles

  • My Entitlements

Lets the end user view the access they have in Advanced Identity Cloud and via applications.

This includes:

  • Accounts from onboarded target applications.

  • Roles they’re assigned in Advanced Identity Cloud.

  • Entitlements or privileges they have in onboarded target applications.

Learn more in Request access to resources.

folder My Directory

Submenu items:

  • My Delegates

  • Direct Reports

Lets the end user manage the delegates and direct reports (employees) they have.

End users can perform the following actions:

  • Manage their delegates. Delegates are individuals that are assigned to their access reviews.

  • Access their direct reports and the access granted to them.

send My Requests

Lets the end user view and create requests to access resources, such as target applications, entitlements, or roles.

Learn more in Request access to resources.
1. IGA is an add-on capability.