Assigning IDM roles

There are restrictions on assigning IDM roles and accessing users with such roles as mentioned earlier. The file authorizationConfig.properties configures how users with IDM roles can access each other's objects. Configuration entries in that file look as follows:

myRole=[accessibleRole{,accessibleRole}]

The file rolesAssignment.properties describes how roles can be assigned.

Note that the authorizationConfig.properties file is a flat file, i.e., you need to enumerate all accessible roles explicitly.