Chat now with support
Chat mit Support

Identity Manager 8.1.5 - Authorization and Authentication Guide

About this guide One Identity Manager application roles Granting One Identity Manager schema permissions through permissions groups Managing permissions to program features One Identity Manager authentication modules OAuth 2.0 / OpenID Connect configuration Multi-factor authentication in One Identity Manager Granulated permissions for the SQL Server and database

Managing permissions to program features

Program functions are part of the permission model in One Identity Manager. They allow you to enable and disable features. Program functions are not assigned to single users but to permissions groups. The set of program functions defined for a user is determined by his or her permissions groups and their program functions.

One Identity Manager tools can only be started if the user has the relevant program function permissions. Furthermore, some functions in the One Identity Manager tools are available only if the program functions are assigned to the current user. This includes data export from the Manager, calling the SQL Editor in the Designer or showing DBQueue Processor information in all programs, as examples.

Detailed information about this topic

Program functions for starting the One Identity Manager tools

The One Identity Manager tools can only be started if the user has the relevant program function permissions. The following program functions allow the One Identity Manager tools to be started.

To make the program function available to users

  • In the Designer under Permissions | Program functions, check which permissions group contains the required program function and assign the program functions to other permissions groups as necessary.
  • For non role-based logins: In the Designer, add the system user to the permissions group in the Permissions | System users category.
  • For role-based logins: Ensure that the user is assigned to the application role that contains the program function.
Table 28: Program functions for starting the One Identity Manager tools

Program function

Description

ApplicationStart_Analyzer

Allows the program Analyzer (Analyzer.exe) to be started.

ApplicationStart_ApiDesigner

Allows the program API Designer (ApiDesigner.exe) to be started.

ApplicationStart_ConfigWizard

Allows the program Configuration Wizard (ConfigWizard.exe) to be started.

ApplicationStart_CryptoConfig

Allows the program Crypto Configuration (CryptoConfig.exe) to be started.

ApplicationStart_DataImporter

Allows the program Data Import (DataImporter.exe) to be started.

ApplicationStart_DBClone

Allows the program (DBClone.exe) to be started.

ApplicationStart_DBComparer

Allows the program (DBComparer.exe) to be started.

ApplicationStart_DBCompiler

Allows the program Database Compiler (DBCompiler.exe) to be started.

ApplicationStart_Designer

Allows the program Designer (Designer.exe) to be started.

ApplicationStart_JobQueueInfo

Allows the program Job Queue Info (JobQueueInfo.exe) to be started.

ApplicationStart_LaunchPad

Allows the program Launchpad (LaunchPad.exe) to be started.

ApplicationStart_LicenseMeter

Allows the program License Meter (LicenseMeter.exe) to be started.

ApplicationStart_Manager

Allows the program Manager (Manager.exe) to be started.

ApplicationStart_ObjectBrowser

Allows the program Object Browser (ObjectBrowser.exe) to be started.

ApplicationStart_OpSupport

Enables start-up of the Operations Support Web Portal.

ApplicationStart_ReportEdit

Allows the program Report Editor (ReportEdit2.exe) to be started.

ApplicationStart_SchemaExtension

Allows the program Schema Extension (SchemaExtension.exe) to be started.

ApplicationStart_ServerInstaller

Allows the program Server Installer (ServerInstaller.exe) to be started.

ApplicationStart_SoftwareLoader

Allows the program Software Loader (SoftwareLoader.exe) to be started.

ApplicationStart_SynchronizationEditor

Allows the program Synchronization Editor (SynchronizationEditor.exe) to be started.

ApplicationStart_SystemDebugger

Allows the program System Debugging (SystemDebugger.exe) to be started.

ApplicationStart_Transporter

Allows the program Database Transporter (Transporter.exe) to be started.

ApplicationStart_WebDesignerCompiler

Allows the program (VI.WebDesigner.CompilerCmd.exe) to be started.

ApplicationStart_WebConfig

Allows the program Web Designer Configuration Editor (WebConfigEditor.exe) to be started.

ApplicationStart_WebDesigner

Allows the program Web Designer (WebDesigner.exe) to be started.

ApplicationStart_WebDesignerInstall

Allows the program Web Installer (WebDesigner.Installer.exe) to be started.

Related topics

Displaying the current user's program functions

To identify the program functions available to the current user:

  • To display user information, double-click the icon in the program status bar

    The Program functions tab shows the program functions that are available.

Assigning program function to permissions groups

To assign a program function to a permissions group

  1. In the Designer, select the Permissions | Program functions category.

  2. Select the View | Select table relations menu item and enable the DialogGroupHasFeature table.

  3. In the List Editor, select the program function.

  4. In the Permissions groups edit view, assign the Permissions groups.

  5. Save the changes.

Related topics
Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen