<Insert Picture Here>

Oracle Role Manager

Carl Terrantroy
Director Market Initiatives ANZ
 Roles In The Real World
Ps=John Ps=Kelly
Org=Corporate

Ps=Clark
Org=Finance Org=Americas
Ps=AR Clerk

Ps=Ian

Org=Sales Org=EMEA Ps=Irene

Ps=Jane

Ps=Wang
Ps=Raj

Org=Marketing Org=APAC

Ps=Vladimir Ps=Amit

2
Part Of Reports Into Matrix Into Job Sharing Head Of Pays For
 Challenges With HR & LDAP

• Functional roles usually do not match org. hierarchy

• Contractor management is complex
• Limited out-of-the-box integration

3
 Agenda

<Insert Picture Here>

• Why Role Manager

• IDM Integration
• Role Concepts

4
 The Evolution of Identity Management
Then We Added Provisioning Tool …..
The The Cat
Helpdesk Who Makes The Applications
User Guy The Rules The Boss IT Dude

Provisioning helps Provisioning helps

with self service with automation & audit
& administration
Rules and polices are Resolving policies into
constantly changing WHO is not trivial

But Provisioning Tools Are Not “Business Smart” …..

5
 The Evolution of Identity Management
Enterprise Role Management Completes The Puzzle
The The Cat
Helpdesk Who Makes The Applications
User Guy The Rules The Boss IT Dude

Provisioning helps Provisioning helps

with self service with automation & audit
& administration

Role Management helps Role Management

define who should have helps define who has
access to what to do what

6
 Open Architecture
Sun, IBM, CA, Novell Manually configured
event logging

Required Bolt-On
No history
or Provisioning Platform Components
User Profile History Log

Workflow
User & Policy Workflow &
Repository Other Meta Data
LDAP Database & File Messaging
Bus

Reporting &
Transaction & Attestation
Reporting Custom
Audit Logs
DB Integration
DB & File
SEM
Log Correlation

Store key only HR-LDAP

No rogue entitlement
No provisioning history
Detection
Real-time scan reporting Synchronization
No reconciliation history

Role
Management

7
 Logical Architecture
Role
User Interfaces Admin
Mining

Services Role Lifecycle Manager

• Business And IT roles
Reporting • Approver Roles
Auditing • Privileges
• Role Mappings
Data • Dynamic Membership Rules
Loading • Membership Rule Simulation
• Sphere of Influence
Role • Event Driven Role Recalculation
Provider
API

Temporal Polyarchy Manager Mining Engine

Engine
• Organization Hierarchies • Role And Rule Mining
• Cross Hierarchy Relationships • Role And Rule Export
Security • Life Cycle Management • Role Clean Up
• Rogue Access Detection
• Role Cleansing For Seg. of Duties
Permissions

Views

8
 Role & Rule Mining
Applications

Accounts,
Attributes,
Entitlements

• Role mining
• Rule mining
• Exports roles and members for ongoing Mining Engine

role management Recommended

Roles
& Rules

Role Management

9
 Polyarchy With Relationship Resolution

Show sales
team grouped
by geographical
business unit Ps=John
hierarchy VP Sales

Ps=Kelly Ps=Vladimir Ps=Amit

ORM GM, Americas GM, EMEA GM, APAC
Polyarchy
Engine

Ps=Jane Ps=Ian Ps=Raj

Account Manager Account Manger Account Manager

10
 Approver Role

• Relationship based roles that capture approval policies

• Role membership resolved in real time for any service

11
 Role Administration

• Centralized enterprise role management

• Support for complex rules
• Ease of use for business users
• Real-time integration

Biz
Roles

IT Roles

System Privileges

12
 Business Rules ERM Can Cope With

• Compliance manager is the financial analyst assigned to

the division
• Level-up manager is manager’s manager and at least one
grade higher
• Risk manager cannot approve his own transactions
• When approver position is empty find the level-up
manager within cost center
• In catastrophic events, approver changes from regional
general manager to line-of-business manager
• Branch manager delegates must have series 9 – 10
certifications

13
Role Consolidation through Role Mining
 Summary

• Missing link between binary IT systems and adaptable

organisation structures
• Copes with loose structures like dotted line reporting
• Extend the capability of your existing IDM investment

15
16