Create an access control item for a manual service

The next step in this scenario is to create an access control item for the manual service. For example, the access control item grants permission to users to write a value such as an employee number or employee name when they request a ledger account.

Create an access control item gives us the ability to securely make this service available to users other than administrators.

Log on to ISIM administrative console as itim manager.

To create an access control item for the manual service.

  1. Log in to the administrative console as an administrator.

  2. Click Set System Security > Manage Access Control Items.

  3. On the Manage Access Control Items page, click Create.

  4. On the General wizard page, complete these fields and then click Next:

    Name
    Enter Ledger_ACI.

    Protection category
    Select Account.

    Object class
    Select LedgerProfile.

  5. On the Operations wizard page, click Next to skip to the next tab.

  6. On the Permissions wizard page, grant Read and Write permission for the employeeName and employeeNumber attributes. Then, click Next.

  7. On the Membership page, check the Account owner check box to specify that the access control item applies to only those accounts that are owned by the user. Do not select other check boxes.

  8. Click Finish to save the access control item.

  9. On the Success page, click Close.

  10. On the Manage Service Types page, click Close.

Parent topic: Configuration of a manual service