Administrative Roles in Provisioning
Provisioning includes the following predefined administrative roles, which you can customize.
Token Administrator. Imports and manages tokens, and assigns tokens to users.
Request Approver. Approves, updates, and rejects Self-Service provisioning requests including new user accounts, user group membership, and token requests.
Token Distributor. Manages token provisioning requests. Determines how to assign and deliver tokens to users.
For each predefined role, you can configure the permissions shown in the following table for each administrator.
General Permissions | Authentication Permissions | Self-Service Permissions |
Manage Policies Manage Security Questions Manage Delegated Administration Manage Users Manage User Groups Manage Reports | Manage SecurID Tokens Manage User Groups Manage User Authentication Attributes Manage Authentication Agents Manage Trusted Realms Manage On-Demand Authentication | Provisioning Requests |
You can limit the administrative scope of each role to a security domain and a identity source. You can also allow a provisioning administrator to delegate the role’s permissions to other administrators. For example, the Request Approver for a corporate division might want to delegate approval permissions to department-level administrators.
You can also assign provisioning permissions to any administrative role in AM. Use the Security Console to configure administrative roles.
Related Articles
Delete an Administrative Role Number of Views RSA SecurID Authenticate Device Registration Overview PDF Number of Views Administrative Role Overview Number of Views Assign an Administrative Role Number of Views RSA-Identity-Governance-and-Lifecycle-Adding entitlement to a role is adding shared accounts to the entitlements Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x
