Scope of the Help Desk Assistant group

The scope of activities for members of the Help Desk Assistant group is primarily to control the passwords, profiles, and accounts of other users.

These tasks might not be available if the person form is customized to exclude some of the attributes for which the help desk assistant has permission to read or write. Additionally, help desk assistants can restore accounts, view the requests of others, and both manage and delegate to-do lists. See Table 1.

Default tasks in view

Default access control items

Self-service or Identity Service Center console Change your passwords, and specify information for your forgotten password questions. View your personal profile. View, request, or delete your accounts. We cannot change, suspend, or restore our own account. View, request, or delete your access. We cannot change, suspend, or restore your access. View your activities. Manage delegation schedules. Administrative console For all users. Create, change, delete, suspend, restore, and transfer users. Change passwords for other users and delegate their activities. Create, change, delete, suspend, and restore accounts. Request and delete access. View pending requests and all requests by user. View activities for the Help Desk Assistant and for other users. Manage delegation schedules.

Self-care or Identity Service Center Search and change a password. Search, add, and change your account password. View basic data about a service, such as service name and description. Administrative For all users. Perform all operations with all permissions on non-administrative accounts. Search business partner organizations, non-administrative groups, locations, roles, and organizational units. Perform all operations with all permissions on persons and business partner persons. Delegate to-do lists.

Parent topic: Scope of groups