Chatta subito con l'assistenza
Chat con il supporto

Identity Manager 9.2 - IT Shop Administration Guide

Setting up an IT Shop solution
One Identity Manager users in the IT Shop Implementing the IT Shop Using the IT Shop with the Application Governance Module Requestable products Preparing products for requesting Assigning and removing products Preparing the IT Shop for multi-factor authentication Assignment requests Delegations Creating IT Shop requests from existing user accounts, assignments, and role memberships Adding system entitlements automatically to the IT Shop Deleting unused application roles for product owners
Approval processes for IT Shop requests
Approval policies for requests Approval workflows for requests Determining effective approval policies Selecting responsible approvers Request risk analysis Testing requests for rule compliance Approving requests from an approver Automatically approving requests Approval by peer group analysis Approval recommendations for requests Gathering further information about a request Appointing other approvers Escalating an approval step Approvers cannot be established Automatic approval on timeout Halting a request on timeout Approval by the chief approval team Approving requests with terms of use Using default approval processes
Request sequence
The request overview Requesting products more than once Requests with limited validity period Relocating a customer or product to another shop Changing approval workflows of pending requests Requests for employees Requesting change of manager for an employee Canceling requests Unsubscribe products Notifications in the request process Approval by mail Adaptive cards approval Requests with limited validity period for changed role memberships Requests from permanently deactivated identities Deleting request procedures and deputizations
Managing an IT Shop
IT Shop base data Setting up IT Shop structures Setting up a customer node Deleting IT Shop structures Restructuring the IT Shop Templates for automatically filling the IT Shop Custom mail templates for notifications Product bundles Recommendations and tips for transporting IT Shop components with the Database Transporter
Troubleshooting errors in the IT Shop Configuration parameters for the IT Shop Request statuses Examples of request results

General main data for service items

Enter the following general main data. If you add a new service item, you must fill out the required fields.

Table 4: General main data of a service item

Main data

Meaning

Service item

Service item name.

Special service item

If a product is used for a specific purpose, for example, for product collection, then mark it as a special service item.

Service category

Group individual products into a collection of products. Select an existing service category from the list or add a new one.

To create a new service category, click . Enter at least one name for the service item.

Product owners

Assign a Request & Fulfillment | IT Shop | Product owner application role.

Product owners can be used as approvers in a defined approval process within the IT Shop. They can decide on approval of the service item request.

To create a new application role, click . Enter the application role name and assign a parent application role.

If no product owner is assigned, the product owner of the assigned service category is determined by template.

Attestors

Assign a Request & Fulfillment | IT Shop | Attestor application role.

The members of this application role can chosen as attestor in an attestation procedure.

To create a new application role, click . Enter the application role name and assign a parent application role.

Cost center

Cost center for booking the service item in the accounts.

Manufacturer

Manufacturer data.

Terms of use

Terms of use for the product. The product can only be requested if the requester has accepted the terms of use.

Request number, product code, product code (foreign)

Company-specific service item properties.

Functional area

Company-specific service item property.

Approval policies

Approval policy used to determine the approver when the service item is requested in the IT Shop.

Request property

Select a request property using the additional request parameters that are defined for a request.

Requests can be given additional information though product-specific request properties such as the specific details of a product, its size, or color. A request property gathers all additional features together that can be given when requesting a product.

To create a new request property, click and enter the request property's name. Then define the request parameters.

Calculation info

Enter the calculation mode as accounting information.

Availability

Company-specific information about the service item‘s availability.

Sort order

Customer-specific criteria for sorting service items.

Website

Web page with more information about the service item.

This field allows you to link product descriptions in the internet or intranet to the service item. To open the website, select Visit website in the default web browser.

Validity period

Time period for limited assignments through IT Shop.

The service item is automatically canceled when the time expires. When multi-request resources are requested (QERReuse), this value has no effect.

Changing the deadline will not affect requests that have already been approved. The new deadline applies to new requests. It is taken into account when calculating the expiration date of pending request if no deadline was previously set (value change from 0 to greater than 0).

Reason type on request

Specifies which type of reason is required when requesting this service item.

  • Optional: A reason can be provided if required.

  • Reason required (standard or free): A standard reason must be selected or a reason given with any text.

  • Free text required: A reason must be given with freely selected text.

NOTE: In the Web Designer Web Portal this information is not used. No distinction is made between the different types of reasons.

Reason type on approval

Specifies which type of reason is required when granting approval to this service item.

  • Optional: A reason can be provided if required.

  • Reason required (standard or free): A standard reason must be selected or a reason given with any text.

  • Free text required: A reason must be given with freely selected text.

NOTE: In the Web Designer Web Portal this information is not used. No distinction is made between the different types of reasons.

Reason type on denial

Specifies which type of reason is required when denying approval to this service item.

  • Optional: A reason can be provided if required.

  • Reason required (standard or free): A standard reason must be selected or a reason given with any text.

  • Free text required: A reason must be given with freely selected text.

NOTE: In the Web Designer Web Portal this information is not used. No distinction is made between the different types of reasons.

Description

Text field for additional explanation.

Retain service item assignment on relocation

Specifies whether requests belonging to this service item remain intact when a customer or a product relocates.

Request parameters must be defined per recipient

Specifies whether request parameters must be entered separately for each recipient of this product, if the product is requested for different recipients in one request procedure.

If this option is not set, the selected request parameters apply uniformly to all recipients of the product.

Not available

Specifies whether the service item can still be requested in the IT Shop.

If this option is enabled, no new requests can be placed for this item. Existing requests remain intact.

Hide in service catalog

Specifies whether the service item is shown in the service catalog. If the option is set, the service item can be requested, but it is not displayed in the service catalog.

Approval by multi-factor authentication

The approval of requests with this service item requires multi-factor authentication.

For more information about attestation, see the One Identity Manager Attestation Administration Guide. For more information about cost centers, see the One Identity Manager Identity Management Base Module Administration Guide.

Detailed information about this topic

Pricing for service items

Enter the required pricing information for booking the service item to the accounts on the Calculation tab.

Table 5: Pricing for a service item

Property

Description

Purchase price

Purchase price.

Sales price

Sales price.

Internal price

Internal transfer price.

Rental rate (purchasing)

Purchase price on product rental.

Rental rate (selling)

Sales price on product rental

Rental rate (internal)

Internal transfer price on product rental

Currency

Currency unit

Sales tax

Sale tax to apply in percent (%)

Extended main data for service items

On the Picture tab, you can import an image of the product into the data base. Select the path where the picture is stored.

On the User-defined tab, enter additional company-specific information in the spare fields. Use the Designer to customize display names, formats, and templates for the fields.

Default service items

One Identity Manager provides service items by default. These service items are assigned to the Identity & Access Lifecycle shop. You can request them as standard products through the Web Portal.

To edit default service items

  • In the Manager, select the IT Shop > Service catalog > Predefined category.

Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione