Overview; System-Wide Roles - Novell IDENTITY ASSURANCE SOLUTION 3.0.2 - ADMINISTRATION Manual

Overview

1
®
Novell has partnered with third-party companies to build a solution that offers an integrated logical
and physical control system that complies with Homeland Security Presidential Directive 12
(HSPD-12). HSPD-12 directs the implementation of a new standardized badging process, which is
designed to enhance security, reduce identity fraud, and protect the personal privacy of users who
are issued government identification.
Identity Assurance Solution provides a complete system for managing the enrollment, issuance,
access control, and retirement of Personal Identification Verification (PIV) cards. This solution is in
compliance with the Federal Information Processing Standards Publication 201 (FIPS 201) and
provides components such as an Identity Management System (IDMS), a User Enrollment/
Biometric Capture system, a Card Management System (CMS), and Logical and Physical Access
Control Systems (LACS/PACS).
During the installation of the Identity Assurance Solution, several roles are created. These roles and
their associated tasks are based on the General Services Administration (GSA) standards. Those
users who are assigned to these roles can perform their tasks by using the User Application for
Provisioning through a Web browser.
This document outlines the roles and tasks performed by each role for the Identity Assurance
Solution.

1.1 System-Wide Roles

This solution includes the following system-wide roles:
System-Wide Roles
Table 1-1
System-Wide Role
System Role Administrator
For more information, see
Section 2.1, "System Role
Administrator," on page 13.
System Security Officer
For more information, see
Section 2.2, "System Security
Officer," on page 14.
Description
Responsible for adding and removing
other users from roles in the system.
Can add or remove users from all
system-wide roles and from the
agency role administrator's role for
each agency. Cannot add or remove
users from agency-specific roles.
Responsible for viewing and
managing the audit log. Does not
have any specific workflow tasks but
is responsible to enforce the rules
and policies related to PIV card
requests, activations, and issuances.
Tasks
Add a User to a System-
Wide Role
Remove a User from a
System-Wide Role
No workflow tasks
1
Overview 9