I was just wondering if anyone can give me some general advice on admin roles. I was wondering if there is a practical limit on the number that you can define in the system? And is there any performance impact related to large numbers of admin roles?
The reason I ask is that we are contemplating building a system using between 3000 and 6000 admin roles. Would this be inadvisable?
Tim
Sounds like role explosion to me... We see this a lot in consulting with customers around this same issue. This needs to be evaluated as a business process issue before attempting to have Idm reflect this number of roles. While Idm could certainly handle a large number of roles, managing them would be a nightmare.
Out of curiosity, how many employees/contractor/etc.. do you have for this many roles?
Yes, this is a major issue. The problem is that the customer is a government IT agency providing services to the whole of the government. We have a situation where we might require several admin roles defined for each business unit in the government, of which there are thousands.
I agree, it would be a management nightmare however it may be a requirement. Our alternate solution is to define broad custom capabilities and manage them instead, only using admin roles where absolutely necessary.
