Which application is used to map authorizations to Identity Vault Roles?

The Role Mapping Administrator is a web-based tool delivered with NetIQ/Micro Focus Identity Manager’s Roles-Based Provisioning Module. Its sole purpose is to link, or “map,” authorizations that exist in connected applications (e.g., SAP roles, AD groups) to business roles that reside in the Identity Vault. Neither iManager, Designer, nor the User Application contains this dedicated mapping interface; they can view or request roles but cannot perform the authorization-to-role correlation task.

A. iFilter – No relation to Identity Manager; used for enterprise search indexing.

B. iManager – Administers eDirectory objects and some IDM drivers, but provides no interface to map external authorizations to Vault roles.

C. Designer – Design/deploy drivers and workflows offline; lacks runtime authorization-mapping functionality.

D. User Applications – End-user and workflow portal; requests roles but cannot create authorization mappings.

1. Micro Focus (NetIQ) Identity Manager 4.8 – Role Mapping Administrator Administration Guide, Section 1.1 “About Role Mapping Administrator,” para 2: “…maps application permissions and authorizations to roles in the Identity Vault.”

2. Micro Focus Identity Manager 4.8 – Installation Guide, Ch 18 “Installing the Role Mapping Administrator,” first paragraph: “Install this component when you need to correlate external system entitlements with Identity Manager roles.”

3. NetIQ Identity Manager 4.7 – Roles Based Provisioning Module User Guide, p. 15: distinguishes Role Mapping Administrator from iManager and User Application, noting only RMA “provides the mapping functionality.”