Personal other accounts

Personal other accounts are accounts that belong to a particular identity. Unlike standard personal accounts, there can be more than one personal other account per person per system. Permissions for personal other accounts are always managed manually. They are typically used for testing or administration.

For the purposes of assigning roles to personal other accounts, each personal account and each role has parameters Zone and Tier. If we want to assign a role to a personal other account, their respective Zone and Tier attributes must match, otherwise the role won't be assigned.

The possible values of Zone and Tier are defined in code lists security-zones and security-tiers respectively.
Zone and tier are propagated into system mapping transformation scripts and during account creation they can be accessed using context.get("wizard").get("zone"/"tier"). For more information about transformation scripts, see here.

  • by otmara