Clarity Entitlements

18 Sep 2024
4 Minutes to read

Print
Dark
Light
PDF

Clarity Entitlements

Updated on 18 Sep 2024
4 Minutes to read

Print
Dark
Light
PDF

Article summary

Did you find this summary helpful?

Thank you for your feedback

Much like Downstream Applications connected to Clarity, the entitlements listed under the Clarity Application are used to define access to Clarity itself. Clarity has several entitlements, each capable of granting a different type or level of access to the application. Some entitlements can be granted automatically when they login with SSO for the first time, see the section below for details: Granting Access.

Clarity Entitlements

The tables below describe functionality in Clarity and what Clarity Entitlements have permissions on those features. Please see the section below regarding granting someone access to Clarity.

Note: For each of the features/functions in the tables below, a logged in user may be able to view/modify objects that they own such as application owners, role owners, review items assigned to that identity, etc. The tables below describe permissions that apply globally to Clarity Entitlements.

Access Reviews

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	✔️	✔️	✔️	✔️
Audit	✔️	❌	❌	❌
Manager	✔️	❌	❌	❌
Read All	✔️	❌	❌	❌
Reporting	✔️	❌	❌	❌

Alerts

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	❌	❌	❌	❌
Audit	✔️	❌	❌	❌
Manager	❌	❌	❌	❌
Read All	✔️	❌	❌	❌
Reporting	❌	❌	❌	❌

Applications

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	❌	❌	❌	❌
Audit	✔️	❌	❌	❌
Manager	❌	❌	❌	❌
Read All	✔️	❌	❌	❌
Reporting	❌	❌	❌	❌

Entitlements

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	❌	❌	❌	❌
Audit	✔️	❌	❌	❌
Manager	❌	❌	❌	❌
Read All	✔️	❌	❌	❌
Reporting	❌	❌	❌	❌

File Exports (Access Reviews and Reports)

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	❌	❌	❌	❌
Audit	✔️	❌	❌	❌
Manager	❌	❌	❌	❌
Read All	✔️	❌	❌	❌
Reporting	❌	❌	❌	❌

Identities

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	✔️	✔️	❌	❌
Audit	✔️	❌	❌	❌
Manager	✔️	✔️	❌	❌
Read All	✔️	❌	❌	❌
Reporting	❌	❌	❌	❌

Reports

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	❌	❌	❌	❌
Audit	✔️	❌	❌	❌
Manager	❌	❌	❌	❌
Read All	✔️	❌	❌	❌
Reporting	✔️	✔️	❌	❌

Roles

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	❌	❌	❌	❌
Audit	✔️	❌	❌	❌
Manager	❌	❌	❌	❌
Read All	✔️	❌	❌	❌
Reporting	❌	❌	❌	❌

Settings (Clarity)

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	❌	❌	❌	❌
Audit	✔️	❌	❌	❌
Manager	❌	❌	❌	❌
Read All	✔️	❌	❌	❌
Reporting	❌	❌	❌	❌

Workflows

Entitlement	View	Create	Update	Delete
Admin	✔️	✔️	✔️	✔️
Access Certification Admin	❌	❌	❌	❌
Audit	✔️	❌	❌	❌
Manager	❌	❌	❌	❌
Read All	✔️	❌	❌	❌
Reporting	❌	❌	❌	❌

Manager, Base User, and End User

End Users and Managers have access to features in Clarity not outlined above, such as Self Service Access Requests, Approvals, and some Alert activities. They do not have any Global access on those items, which is why those entitlements aren't listed in the tables above.

Manager

Managers, similar to Access Certification Admins or Admins, can be set as the Default Reviewer. This is the standard entitlement to provide to someone who needs to perform the Review portion of an Access Review.

Base User

Base User is automatically granted and simply enables the ability for the Identity to log into the platform. See below about the Grant Clarity Login button.

End User

End User is automatically granted as described below, and provides the lowest level of access within Clarity. This entitlement primarily grants access to the Self Service Portal.

Granting Access

Grant Clarity Login

When you click the Grant Clarity Login button depicted below (this is found on the Identity page for the individual user), this enables the account to Login by granting them the Base User and End User entitlements.

Password

An email will be sent to the email address for the Identity prompting them to reset the password for your account.

The article below walks you through that process.
How to Reset your Password

First-time login with SSO

If you have SSO correctly configured for Clarity and login for the first time:

User attempts to log in to Clarity, which redirects to the SSO provider of your choice. The user enters their credentials into this service.
SSO Provider either approves or denies the login attempt (based on group membership in SSO Provider), and tells Clarity whether the login was successful. If successful, then the process continues to steps 3 and 4.
Clarity will add the Base User and End User entitlements, and add the user to the list of accounts with the ability to log in.
Clarity will also grant Manager entitlement if the Identity is assigned as a Reviewer on any active Access Reviews (at the time of first login only).

Need help?

If you have any problems, contact your customer success team. You can also get in touch with our general support via email, open a support ticket. Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.

Was this article helpful?

What's Next

Access Review Categories and Types

Table of contents