After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.
You can view all the roles and permission levels that are valid for this site on the overview form. Use Open URL to open the site in a standard web browser. Prerequisite for this is that the server in the URL can be resolved per DNS.
To obtain an overview of an site
If the server declared in the URL can be resolved by DNS, you can open the site in the default browser.
To open the site
SharePoint Online roles are defined at site level. There are always roles defined for the root site of a site collection. Child sites can inherit these role definitions. In the same way, roles on the root site of a site collection are also assigned to groups or user accounts. These assignments can inherit child sites. Unique role assignment specifies whether user accounts and groups are explicitly authorized for a site or whether the role assignments are inherited by the parent website.
Child sites can inherit permissions from the sites that the user accounts have on those sites. Every root site of a site collection or every site that has a child site. This permits the following scenarios:
The permission levels and role definitions of the parent site apply. User and groups cannot be explicitly authorized for the site. Only user accounts that have permissions for the parent (inheritance) site have access to the site.
In this case unique permission levels can be created in the same way as the root site of a site collection. The SharePoint Online roles based on the definitions are assigned to user accounts and groups.
Permission levels with a unique reference to a site are mapped in the One Identity Manager database as SharePoint Online roles. You can assign SharePoint Online roles through groups, or directly to user accounts. SharePoint Online users obtain their permissions for site objects in this way.
|NOTE: SharePoint Online roles and role assignments are handled as dependent objects by synchronization. That means, SharePoint Online roles must also be synchronized in order to synchronize role assignments.|
To edit SharePoint Online role master data
Select the SharePoint Online role in the result list and run the Change master data task.
|Note: If the SharePoint Online role references a permission level for which the Hidden option is set, the options IT Shop and Only use in IT Shop cannot be set. You cannot assign these SharePoint Online roles to user accounts or groups.|
© 2020 One Identity LLC. ALL RIGHTS RESERVED. Feedback Nutzungsbedingungen Datenschutz