In order for SharePoint user accounts to obtain permissions for individual websites, assign SharePoint roles to the groups. SharePoint roles and groups must belong to the same site collection.
NOTE: SharePoint roles with the Hidden option that reference permission levels, cannot be assigned to groups.
To assign groups to a SharePoint role
- Select the SharePoint > Roles category.
- Select the role in the result list.
- Select the Assign groups task.
- In the Add assignments pane, assign groups.
- OR -
In the Remove assignments pane, remove groups.
- Save the changes.
Related topics
Installed modules: |
System Roles Module |
Use this task to add a SharePoint role to system roles. If you assign a system role to identities, all authenticated user accounts owned by these identities inherit the SharePoint role.
NOTE: SharePoint roles with the Only use in IT Shop option set, can only be assigned to system roles that also have this option set. For more information, see theOne Identity Manager System Roles Administration Guide.
To assign a SharePoint role to system roles
- Select the SharePoint > Roles category.
- Select the role in the result list.
- Select the Assign system roles task.
-
In the Add assignments pane, assign system roles.
TIP: In the Remove assignments pane, you can remove assigned system roles.
To remove an assignment
- Save the changes.
Related topics
Once a SharePoint role has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed.
- The SharePoint role must be labeled with IT Shop option.
- The SharePoint role must be assigned to a service item.
- The SharePoint role must be also labeled with the Only use in IT Shop option if the SharePoint role can only be assigned to identities using IT Shop requests. Direct assignment to hierarchical roles may not be possible.
NOTE: IT Shop administrators can assign SharePoint roles to IT Shop shelves in the case of role-based login. Target system administrators are not authorized to add SharePoint roles in the IT Shop.
To add a SharePoint role to the IT Shop
- Select the SharePoint > Roles category.
- Select the role in the result list.
- Select the Add to IT Shop task.
- In the Add assignments pane, assign the IT Shop shelves.
- Save the changes.
To remove a SharePoint role from individual IT Shop shelves
- Select the SharePoint > Roles category.
- Select the role in the result list.
- Select the Add to IT Shop task.
- In the Remove assignments pane, remove the group from the IT Shop shelves.
- Save the changes.
To remove a SharePoint roles from all IT Shop shelves
- Select the SharePoint > Roles category.
- Select the role in the result list.
- Select the Remove from all shelves (IT Shop) task.
- Confirm the security prompt with Yes.
- Click OK.
The SharePoint role is removed from all shelves by the One Identity Manager Service. All requests and assignment requests are canceled along with the SharePoint role as a result.
Detailed information about this topic
- One Identity Manager IT Shop Administration Guide
Related topics
After you have entered the main data, you can run the following tasks.