---
title: "Organizational Units"
slug: "organizational-units"
description: "This article will walk you through the different configuration options on the Settings > Organizational Units page in Clarity."
updated: 2025-01-08T18:32:50Z
published: 2025-01-08T18:32:50Z
canonical: "help.claritysecurity.com/organizational-units"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Organizational Units

This article will walk you through the different configuration options on the **Settings > Organizational Units** page in Clarity.

---

## Role modification options

A common example of the Role Based Access Control structure is using Department and Job Title (shown above). This will result in the creation of roles for every department (intermediary role) found within your organization, and every Job Title found under each department (terminal role).

## Organizational Unit order

Here you can pick the Attributes defined on the [Identity Attributes](/v1/docs/identity-attributes) page to determine your Role Based Access Control structure.

![Department, Job Title RBAC Structure](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Departmentt,%20Job%20Title%20RBAC%20Structure.png?sv=2026-02-06&spr=https&st=2026-10-31T18%3A12%3A54Z&se=2026-10-31T19%3A12%3A54Z&sr=c&sp=r&sig=I6Tad7IBOnylmwgRM9%2BFv4Z74Faj6EHiC1aDA%2FJvqT0%3D)

## Rebuilding and Purge

![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image(498).png?sv=2026-02-06&spr=https&st=2026-10-31T18%3A12%3A54Z&se=2026-10-31T19%3A12%3A54Z&sr=c&sp=r&sig=I6Tad7IBOnylmwgRM9%2BFv4Z74Faj6EHiC1aDA%2FJvqT0%3D)

#### Discard

Discard any changes you have already made to the page.

#### **Save**

Save the changes made to the the Disable Provisioning toggle or changes to the Organizational Units.

#### **Build Roles & Role-Entitlements**

This option will not remove entitlements already part of existing roles, but it may add new entitlements based on 100% matching (all members of the role already have the entitlement).

#### **Purge Roles & Role-Entitlements**

This will delete all Roles and Role-Entitlement relationships. It is recommended to perform this action, followed by the **Build Roles & Role-Entitlements** if you plan to reset your roles, or have made changes to your Organizational Units.

## Provisioning

![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image(499).png?sv=2026-02-06&spr=https&st=2026-10-31T18%3A12%3A54Z&se=2026-10-31T19%3A12%3A54Z&sr=c&sp=r&sig=I6Tad7IBOnylmwgRM9%2BFv4Z74Faj6EHiC1aDA%2FJvqT0%3D)

This option lets you globally block provisioning in your Clarity platform. This overwrites any individual app based configurations.

## Special Roles

**Global (Everyone)** - This role is always present, and cannot be removed. Every identity in Clarity is a member of this role and can be used to provide all Active Identities with an entitlement you specify. **Default or Intermediary/Default** - For any identities that exist in Clarity, but are missing a valid attribute (for the corresponding Organizational Units), a role (intermediary or terminal) will be generated using **Default**. Check out the examples below for more details on roles generated with the name **Default**.

Examples of **Default** roles

1. If an Identity is missing the Department attribute, but has the Job Title **Senior Developer**, they would receive the role **Default/Senior Developer**.
2. If an Identity is missing the Job Title attribute, but has the Department **Accounting**, they would be assigned the **Accounting/Default** role.
3. If an Identity is missing both Department and Job Title attributes, they would be added to the **Default/Default** role.

---

## Need Help?

If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.

Role Based Access Control is an approach to managing access by provisioning pre-approved access based on an Identity's function within an organization.

Organizational Units are a top down hierarchical structure used to generate Roles in Clarity.