3.1 Configuring access to actions

Each person who wants to use the MyID Client for Windows must be assigned a role that provides the appropriate workflow that corresponds to the action; in addition, you must configure the built-in system role Default SSA User with the same permissions. This is because the MyID Client for Windows displays the list of actions before the person has authenticated themselves to the MyID server.

• Change My PIN – requires access to the Change PIN workflow in Edit Roles.

• Change My Security Phrases – requires access to the Change My Security Phrases workflow in Edit Roles.

• Reset My PIN – requires access to the Unlock My Card workflow in Edit Roles.

• Update My Device – requires access to the Update My Device (for both the Default SSA User role and the person's role) and Collect My Updates (for the person's role only) workflows in Edit Roles.

  Note: Self-service device update requires additional configuration, as it may not be suitable for all organizations. This configuration also determines what sort of device update is available; you may be able to update your device to the latest credential profile, or you may be able to reprovision your device completely. See section 3.2, Setting up self-service device update for details.