User guide

Authorization
1-37
Figure 1-29 Information Required for Authorization Using Roles
Role Configuration
The role or role set name to be used is registered as a role configuration.
Roles are used to authorize the users who access the business system. Roles must be designed on
the basis of the departments and businesses of the users who use the business system. To define a
post, e.g., "general employee" or "manager," or a department, e.g., "accounting department" or
"administration department," as a role, use the role name that corresponds to the post or department as
shown in the table below to define it in the SSO repository.
When multiple roles are grouped and defined as a role set according to the hierarchy of organization
and assigned to resource information, the system has the flexibility to accommodate the future changes
in organization.
Note
Interstage Single Sign-on provides authorization with a role. Please be sure to perform a role
configuration to the SSO repository. Unless role configuration is performed, a repository server does
not start.