OIM access rights policy design!

Team,

I am new(learning) to OIM (Oracle Identity Manager).

Oracle Identity Governance Suite offers enterprises an array of options for assigning access controls. For example, access rights can be issued automatically based on role assignments derived from a rule or policy governing how and when the role is applied to user accounts -  How can it be achieved?

Users can also request the capability of exclusively using a privileged account and, upon the grant, checkout the account to acquire exclusive privileged access to the underlying application or infrastructure component. - Which all components are involved and how it can be designed?