Home
Role-based access control
Learn about role-based access control.
Adding role members
To add role members who do not fit the default role-based provisioning policy criteria, you must add them manually.

About ClearID
Learn about the ClearID self-service physical access management solution.
What's new
Check out what's new in the latest update to ClearID.
Deployment preparation
Check your compatibility and deployment requirements.
ClearID plugin
Learn how to download and install the plugin.
Managing identities and users
Learn how to manage identities and users.
Managing sites
Learn how to manage sites.
Managing areas
Learn how to manage areas.
Managing visitors
Learn how to manage visit requests and access requests.
Managing visitor watchlists
Learn how to manage visitor access using watchlists.
Role-based access control
Learn about role-based access control.
- About role-based access control
  Role-based access control uses identities with various attributes to automatically manage access control. Defining provisioning policies ensures that people in your organization always have up-to-date access permission levels. If an employee changes job title, department, or moves to a different site, the system automatically adjusts their access when their identity attributes are changed.
- Adding roles
  Before you can configure your role-based automatic access control policies, you must define your roles.
- Configuring role managers
  Role managers are composed of two distinct roles: role owners and role managers. Before you can define policies for a role or add or remove identities from a role, you must assign one or more employees as role managers.
- Configuring role-based access control policies
  To ensure that people in your organization always have up-to-date access permission levels, you can define provisioning policies that automatically assign people to specific roles based on their identity attributes. If an employee changes job title, department, or moves to a different site, the system automatically adjusts their access.
- Adding custom provisioning attributes to an identity
  When the default Genetec ClearID™ policy attributes do not meet your needs, you can manually assign custom provisioning attributes to an employees identity record. These attributes can then be used in a role-based access control policy.
- Adding role members
  To add role members who do not fit the default role-based provisioning policy criteria, you must add them manually.
- About role activity report
  In Genetec ClearID™, a role activity report is an audit trail of all activities related to roles. The report includes timestamp information, activity type, who activity was performed by, and a details section including reason information.
- Viewing a role activity report
  As an Account administrator, Role manager, or Role owner, you can view an audit trail of role-related activities such as timestamp information, activity type, who performed the activity, and more.
Connecting to other systems
Learn how to connect ClearID to other systems.
ClearID Self-Service Kiosk
Learn about the ClearID Self-Service Kiosk mobile app that simplifies visitor management and check-in.
Troubleshooting
Troubleshoot common issues that can occur.
Additional resources
Need tech support or product information? Check out these resources.
Glossary

Adding role members

2021-12-14

To add role members who do not fit the default role-based provisioning policy criteria, you must add them manually.

Before you begin

Add role managers.

What you should know

Only role managers can add role members.
When a provisioning policy is enabled, role members are added automatically based on rules defined in the policy. Role members that are automatically added are shown in Authorized by column as Provisioning policy.
Role members can also be added manually. Role members that are manually added are shown in the Authorized by column as Manual.
Role members that match a provisioning policy are locked and cannot be removed.
Role members that no longer match a provisioning policy are immediately unlocked. They are automatically removed after the period specified in a provisioning policy.

Procedure

From the Home page, click Organization > Roles and select a role.
Click Members to configure the list of role members.
Click Add members.
Search for or select one or more members.
Enter a reason and click Add.
The following example shows the Dubai Engineering Team role members.
Note: The Authorized by column shows four members that were added automatically (Provisioning policy) and one that was added manually (Manual).

Tip: You can click the blue text in the Name column to view or modify the identity details.
(Optional) To immediately remove any role members who no longer meet the policy criteria, or role members that were added manually, click then click Remove.