Roles are a collection of permissions that can be assigned to a user or group. You can add, remove, or limit the scope of roles for PingOne users from the Users page. Learn more about the capabilities of each role in Roles.
- Go to Directory > Users and browse or search for the user that you want to edit.
- Click the user entry to open the user details panel.
-
Click the Roles tab.
If roles are assigned, they are listed here with information about where those roles apply. For example, in the following image, BX User has the Environment Admin role, and they have that role for four environments.
Note:Roles can be assigned to users, groups, worker applications, or PingFederate gateway integrations.
Click the Info icon to view the permissions associated with the role. Click the down arrow on the right to view the list of environments or populations for which the role is assigned.
-
Click Grant Roles.
The Available Responsibilities tab lists the roles that you are allowed to assign and the environments for which you are allowed to assign them. A responsibility is the combination of the role assignment and the level, or scope, at which the role is applied. Depending on the role, it could be assigned at the organization, environment, or population level.
The Granted Responsibilities tab lists the roles, if any, that are currently assigned.
-
From Available Responsibilities, click the role that you want to
assign or change and perform any combination of the following:
Note:
You can grant only roles that are assigned to you, or that confer the permissions needed to assign that role to others. For example, if you do not have the Environment Admin role, you cannot assign the Environment Admin role to others (and that role will not be listed under Available Responsibilities). However, if you have the Identity Data Admin role, you can assign either the Identity Data Admin role or the Identity Data Read Only role to others.
Learn more about the permissions associated with each role in Roles.
-
To assign the role, select the check boxes next to the applicable
environments.
Tip:
Click Select All or Remove All to select or clear all available responsibilities.
- To remove a role assignment, clear the check boxes next to the applicable environments.
-
To grant this access for only a portion the environment, click the
Reduce Access icon (), select a subset of the available populations on Limit
Access, and click Confirm.
-
To assign the role, select the check boxes next to the applicable
environments.
- Click Save.
The role assignments that you selected are listed on the Granted Responsibilities tab.