About Setting Up Roles and Users

Identity Access Management automatically adds the IAM Customer User role and IAM Customer Admin role as standard roles for every organization.

• IAM Customer User - Most commonly-assigned role used by all users of an organization to access partner applications, and manage self-service functions such as changing your password and secret questions. All users are added to the IAM Customer User role during automatic provisioning.
• IAM Customer Admin - An organization administrative role used to manage user attributes, data profiles, and PSIDs, and set up the organization's security policy.

If the organization adds any partner applications that have their own roles, those roles are available to the organization as well. Partner-specific roles automatically have access to the partner application, and you can assign other resources to it as necessary.

Identity Access Management uses automatic provisioning to add organization and user information. Automatic provisioning assigns all users to the IAM Customer User role, and those users have access to all partner applications that are assigned to the IAM Customer User role. The IAM Customer Admin can set up additional roles and assign resources to those roles after automatic provisioning.

Identity Access Management gives you three ways to create users:

• Add users using the File Import feature described in Managing File Imports.
• Provision users using a web service that extracts user information and loads it into Identity Access Management. At this time we offer web services only for PowerPay and Solution Centre users.
• Add users manually in the Identity Access Management