You use the following tools in the Informatica MDM Hub Console to configure SAM: Users, Users and Groups, Roles, and Secure Resources / Resource Groups (including packages and cleanse functions).
In addition, you use the IDD Configuration Manager to bind your SAM configuration to IDD objects.