What is the difference between rules-based and role-based access control?
Rules provide a very flexible means of assigning permissions based on user attributes such as department, partner level, or location. They provide a means of assigning access rights without having to go through the process of defining formal roles. Role-based access control uses predefined roles that specify which resources a user should get access to when a given role is assigned. In organizations where roles are well-known, this information can be leveraged for provisioning. Identity Manager supports both approaches, giving organizations the flexibility to choose the best solution for their environment.
