These delegated administrators can be any user outside the organization's IT department, including a customer.

The following employees typically fulfill roles that involve at least a basic level of identity management:

  • Help desk or customer service representatives who unlock and reset passwords
  • Managers and Human Resources administrators who update employee profiles
  • Application administrators who update identity attributes and manage access to applications

These employees represent strong candidates for inclusion in a group of delegated administrators.