How do I assign default roles in my Organization

As an Organization Owner user in an Identity and Access Governance (IGA) activated Organization, you can assign default Organization and service roles to users in your Organization by setting up a policy.

Your corporate identity provider is linked to Tanzu Platform cloud services.
Advanced IGA features are activated in the Organization.
You have an Organization Owner role in the Organization.

The default roles granted through that policy apply to all users logging in the Organization from a specified federated domain and cannot be edited at the user level. To change the default role entitlements, you must modify the policy.

Important
There is a known issue that as an Organization Owner, you cannot view the users in your Organization who have been granted default roles based on the policy and who have no other roles in the Organization. These users will not display on the Active Users list in Tanzu Platform cloud services console unless they request additional roles and the requests are approved. Once users with default roles obtain additional roles in the Organization, they appear on the Active Users list and as an Organization Owner, you can grant them additional roles.

Log in to the Tanzu Platform cloud services console with your corporate account.
Navigate to Identity and Access Management > Governance > Requests.
Click Settings.
In the Grant Default Roles section of the page, click the Add Domain Policy link.
Enter a name and description for the new policy.
Select the domain to which you want to apply the policy.
Select the Organization and service roles that you want to automatically assign to all users logging into your Organization from the specified domain.
Click Save.

The roles you specified become available to all users from the specified domain upon their login to Tanzu Platform cloud services.

Parent topic:What is Identity Governance and Administration and how does it work with Tanzu Platform cloud services