Assigning users to roles

Before you can add Active Directory users and groups to roles, you must first integrate Active Directory with Privileged Access Service. Installing the Centrify Connector initiates the integration. See How to install a Centrify Connector. After you install the Centrify Connector, you can add those domain users to specific roles.

If you assign users to custom roles or change the default behavior for the Everybody role, it is important to verify that users can access the Privileged Access Service Admin Portal. Access to the portal is required to open assigned applications and register mobile devices.

Only members of the System Administrator role or members of a role with the Role Management administrative right can create and assign users to roles.