{"id":1393,"date":"2024-01-16T11:05:12","date_gmt":"2024-01-16T10:05:12","guid":{"rendered":"https:\/\/memority.p2.pp-izhak.fr\/2024\/01\/16\/le-modele-de-role\/"},"modified":"2024-07-07T23:42:22","modified_gmt":"2024-07-07T21:42:22","slug":"the-memority-role-model","status":"publish","type":"post","link":"https:\/\/memority.p2.pp-izhak.fr\/en\/the-memority-role-model\/","title":{"rendered":"The Memority role model"},"content":{"rendered":"

Memority offers a powerful role model definition to manage delegated administration into Memority portal but also applications accesses, equipment and any other link between an identity and a resource.<\/p>\n

This blog series<\/strong>\u00a0will allow you to understand\u00a0how we handled this fundamental part of right management.<\/strong><\/p>\n

<\/div>\n
\n
<\/div>\n

As named, Identity and Access Management (IAM) allows to manage inside an organization identities that need to access resources.<\/strong>\u00a0In the past, authorizations were given with more or less control, with more or less known processes and with more or less painful rights omissions (to add or to remove).\u00a0To control and simplify authorizations management, it is necessary to define a role model which will allow to set publication rules, access conditions and most important, role removal at the right point!<\/strong><\/p>\n

The role assigns to a user one or more rights about a resource.<\/strong>\u00a0It allows to define a first level of abstraction and automatism against a technical right and to control that two users with the same roles will have the same rights. But when we need to manage thousands of resources with different types, it becomes necessary to organize and design rights into a role model to manage them as one and allow anyone to request roles easily: the user in self-service, its manager, an application manager and more.<\/p>\n

\"\"

Thanks to role model, it now possible to offers normalized and simple interfaces to users<\/p><\/div>\n

A very dynamic role model<\/strong><\/h3>\n

Memority\u2019s role model is highly dynamic\u00a0<\/strong>and allows to manage administration rights in Memority, applications accesses, equipment, business roles, contracts and more. In a word, we can represents anything as a resource assigned to a user. To do that, we use several concepts:<\/p>\n