|
NOTE: The Manager is locked for editing throughout. To edit objects in the Manager, close the Synchronization Editor. |
To open an existing synchronization project in the Synchronization Editor:
SharePoint Online user accounts provide the information necessary for user authentication, such as, the authentication mode and login names. In addition, permissions of users in a site collection are specified in the user accounts.
Each SharePoint Online user account represents an object from an authentication system trusted by the SharePoint Online system. In SharePoint Online, the authentication system is Azure Active Directory. The target system, Azure Active Directory, must be administrated in One Identity Manager so that the object used for authentication on the SharePoint Online user account can be saved as the authentication object. This means the SharePoint Online user account permissions are mapped to employees managed in One Identity Manager. One Identity Manager makes it possible for you to obtain an overview of all an employee's SharePoint Online access permissions. SharePoint Online permissions can be attested and checked for compliance. Employees can request or obtain the SharePoint Online permissions they requires through their memberships in hierarchical roles or through the Web Portal when appropriately configured.
By default, the following objects can be assigned as authentication objects in One Identity Manager.
During synchronization, One Identity Manager tries to assign the matching authentication object using the login name.
A user account can be linked to an employee in One Identity Manager. You can also manage user accounts separately from employees.
|
NOTE: It is recommended to use account definitions to set up user accounts for company employees. In this case, some of the master data described in the following is mapped through templates from employee master data. |
|
NOTE: If employees are to obtain their user accounts through account definitions, the employees must own a user account and obtain their IT operating data through assignment to a primary department, a primary location or a primary cost center. |
To create a user account
In Manager, select SharePoint Online | User accounts (user authenticated).
- OR -
In Manager, select SharePoint Online | User accounts (group authenticated).
Click in the result list toolbar.
On the master data form, edit the master data for the user account.
To edit master data for a user account
In Manager, select SharePoint Online | User accounts (user authenticated).
- OR -
In Manager, select SharePoint Online | User accounts (group authenticated).
Select the user account in the result list and run Change master data.
Edit the user account's resource data.
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Nutzungsbedingungen Datenschutz