When an administrator wants to manually assign a role to an identity or act on an existing assignment, the role request mechanism described above applies. Thus, only the roles on which this requestor can act for this beneficiary will be presented. In the same way, the buttons allowing to act on an existing assignment will be displayed only for the requesters who can act on it for this identity.
In addition, SOD rules are also computed at this time to allow or disallow the assignment of a role for a given identity. The SOD rules and their operation will be detailed in chapter SOD management.
