1. Navigate to the docker\compose folder of the Identity Manager client instance, for example: 

   Example: docker-compose.yml folder

   \docker\compose\identitymanager\operator

2. Open the file docker-compose.yml for editing.

3. Add a system.properties.idmInstanceId entry with a unique and descriptive instance ID name: 

   Example: instance ID in system.properties

   services:
     idm-operator:
       ...
       labels:
   		...
           - "system.properties.idmInstanceId=instanceName"

4. Save the file.

1. Navigate to the WEB-INF\classes folder of the Identity Manager client instance, for example: 

   Example: system.properties folder

   \tomcat\webapps\prime_explorer\WEB-INF\classes

2. Open the file system.properties for editing.

3. Update idmInstanceId to a unique and descriptive name: 

   Example: instance ID in system.properties

   #In a multi-node env the instance ID is the value that uniquely identifies each Tomcat
   idmInstanceId=instanceName

   The old property detailedUserInformationCreator.explorerInstanceId also still works for the same setting.
4. Save the file. 

To limit an Identity Manager role to only access certain instances, update the Instance Ids field in the Role configuration with one or more idmInstanceId values that were configured in system.properties.

For more information, see the section For roles: Limit access to certain instance IDs in Set permissions from Identity Manager users or roles.

Settings

Instances of Identity Manager Operator:

• instanceId = Internet
• instanceId = Intranet

Roles: 

• Administrator: limited to Intranet
• User: all instances available.
  This is set by leaving the Instance Ids field empty in the Role settings.  

User:

• admin, with assigned roles: Administrator, User

Resulting behavior

• When the admin user logs into Identity Manager Operator using the Tomcat instance Intranet, they will have the role Administrator.
• When the admin user logs into Identity Manager Operator using the Tomcat instance Internet, they will have the role User.