Chat now with support

Live-Hilfe anfordern
Registrierung abschließen

Anmelden

Preisinformationen anfragen

Vertrieb kontaktieren

Identity Manager 8.2.1 - Administration Guide for Connecting to Google Workspace

Inhaltsnavigation

Mapping a Google Workspace environment in One Identity Manager

Architecture overview One Identity Manager users for managing a Google Workspace customer Configuration parameters

Synchronizing a Google Workspace customer

Setting up initial synchronization of a Google Workspace customer

Users and permissions for synchronizing with a Google Workspace customer

Setting up the necessary permissions for accessing the Google Workspace customer

Setting up the Google Workspace synchronization server

System requirements for the Google Workspace synchronization server Installing the One Identity Manager Service

Creating a synchronization project for initial synchronization of a Google Workspace customer

Information required for setting up a synchronization project Creating an initial synchronization project for a Google Workspace customer

Configuring the synchronization log

Customizing the synchronization configuration for Google Workspace

Configuring synchronization with Google Workspace customers Configuring synchronization of different Google Workspace customers Updating schemas Speeding up synchronization with revision filtering Advanced settings for the system connection to Google Workspace

Editing connection parameters in the variable set Editing target system connection properties

Configuring the provisioning of memberships Configuring single object synchronization Accelerating provisioning and single object synchronization

Running synchronization

Starting synchronization Displaying synchronization results Deactivating synchronization Synchronizing single objects

Tasks following synchronization

Post-processing outstanding objects Adding custom tables to the target system synchronization Managing Google Workspace user accounts through account definitions

Troubleshooting Ignoring data error in synchronization

Managing Google Workspace user accounts and employees

Account definitions for Google Workspace user accounts

Creating account definitions Editing account definitions Main data for account definitions Editing manage levels Creating manage levels Assigning manage levels to account definitions Main data for manage levels Creating mapping rules for IT operating data Entering IT operating data Modify IT operating data Assigning Google Workspace account definitions to employees

Assigning Google Workspace account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions in the IT Shop

Assigning Google Workspace account definitions to target systems Deleting Google Workspace account definitions

Assigning employees automatically to Google Workspace user accounts

Editing search criteria for automatic employee assignment Finding employees and directly assigning them to user accounts Changing the manage level in Google Workspace user accounts Assigning account definitions to linked user accounts

Manually linking employees to Google Workspace user accounts Supported user account types

Default user accounts Administrative user accounts

Providing administrative user accounts for one employee Providing administrative user accounts for several employees

Privileged user accounts

Specifying deferred deletion for Google Workspace user accounts

Login information for Google Workspace user accounts

Password policies for Google Workspace user accounts

Predefined password policies Using password policies Editing password policies Creating password policies General main data of password policies Policy settings Character classes for passwords Custom scripts for password requirements

Checking passwords with a script Generating passwords with a script

Editing the excluded list for passwords Checking passwords Testing the generation of passwords

Initial password for new Google Workspace user accounts Email notifications about login data

Managing Google Workspace entitlement assignments

Assigning Google Workspace entitlements to user accounts in One Identity Manager

Prerequisites for indirect assignment of Google Workspace entitlements to Google Workspace user accounts Assigning Google Workspace entitlements to departments, cost centers, and locations Assigning Google Workspace entitlements to business roles Adding Google Workspace entitlements to system roles Adding Google Workspace entitlements to the IT Shop Assigning Google Workspace user accounts directly to an entitlement Assigning Google Workspace entitlements directly to a user account Assigning Google Workspace groups directly to a customer Assigning Google Workspace customers directly to a group

Effectiveness of Google Workspace entitlement assignments Inheritance of Google Workspace entitlements based on categories Overview of all assignments

Mapping of Google Workspace objects in One Identity Manager

Google Workspace customers

Creating Google Workspace customers Editing main data of Google Workspace customers General main data of Google Workspace customers Google Workspace customer address data Defining categories for the inheritance of Google Workspace entitlements Additional tasks for managing Google Workspace customers

Displaying the Google Workspace customer overview Editing the synchronization project for a Google Workspace customer

Google Workspace user accounts

Creating Google Workspace user accounts Editing main data of Google Workspace user accounts General main data of Google Workspace user accounts Password data for Google Workspace user accounts Phone numbers for Google Workspace user accounts Addresses for Google Workspace user accounts Email addresses for Google Workspace user accounts External IDs for Google Workspace user accounts Instant messenger data for Google Workspace user accounts User details for Google Workspace user accounts Relationships of Google Workspace user accounts Websites of Google Workspace user accounts Additional tasks for managing Google Workspace user accounts

Displaying the Google Workspace user account overview Assigning extended properties to Google Workspace user accounts Moving Google Workspace user accounts to a different organization

Locking Google Workspace user accounts Deleting and restoring Google Workspace user accounts Transferring user data to a different Google Workspace user account

Google Workspace groups

Creating Google Workspace groups Entering main data of Google Workspace groups General main data of Google Workspace groups Additional settings for Google Workspace groups Additional tasks for managing Google Workspace groups

Displaying the Google Workspace group overview Assigning extended properties to Google Workspace groups Assigning group managers to Google Workspace groups Assigning group owners to Google Workspace groups Assigning Google Workspace groups to Google Workspace groups

Deleting Google Workspace groups

Google Workspace products and SKUs

Editing main data of Google Workspace products and SKUs General main data of Google Workspace products and SKUs Additional tasks for managing Google Workspace products and SKUs

Displaying the Google Workspace products and SKUs overview Assigning extended properties to Google Workspace products and SKUs

Google Workspace organizations

Creating Google Workspace organizations Editing main data of Google Workspace organizations General main data of Google Workspace organizations Additional tasks for managing Google Workspace organizations

Displaying the Google Workspace organizations overview Moving Google Workspace organizations

Deleting Google Workspace organizations

Google Workspace domains Google Workspace domain aliases Google Workspace admin roles

Creating Google Workspace admin roles Editing main data of Google Workspace admin roles General main data of Google Workspace admin roles Additional tasks for managing Google Workspace admin roles

Overview of Google Workspace admin roles Assigning admin privileges to Google Workspace admin roles

Deleting Google Workspace admin roles

Google Workspace admin privileges

Display main data of Google Workspace admin privileges Additional tasks for managing Google Workspace admin privileges

Overview of Google Workspace admin privileges Assigning Google Workspace admin privileges to admin roles

Google Workspace admin role assignments

Creating Google Workspace admin role designations Additional tasks for managing Google Workspace admin role assignments

Overview of Google Workspace admin role assignments Assigning extended properties to Google Workspace admin role assignments

Deleting Google Workspace admin role assignments

Reports about Google Workspace objects

Handling of Google Workspace objects in the Web Portal Basic configuration data for managing a Google Workspace customer

Job server for Google Workspace-specific process handling

Editing Google Workspace Job servers General main data of Job servers Specifying server functions

Target system managers for Google Workspace customers

Troubleshooting the connection to a Google Workspace customer

Newly added Google Workspace user accounts are marked as outstanding

Configuration parameters for managing a Google Workspace environment Default project template for Google Workspace API scopes for the service account Processing methods of Google Workspace system objects Special features in the assignment of Google Workspace groups

Google Workspace groups

Users of Google Workspace can use groups to exchange information or organize meetings. This information is only made available to the members of a group. In One Identity Manager, you can create and edit groups and manage group members.

Creating Google Workspace groups

To create a group

In the Manager, select the Google Workspace > Groups category.
Click in the result list.
On the main data form, edit the main data of the group.
Save the changes.

Detailed information about this topic

Related topics

Entering main data of Google Workspace groups

To edit group main data

In the Manager, select the Google Workspace > Groups category.
Select the group in the result list.
Select the Change main data task.
On the main data form, edit the main data of the group.
Save the changes.

Detailed information about this topic

Related topics

General main data of Google Workspace groups

On the General tab, edit the following main data.

Table 37: Entering main data of a group
Property	Description
Google Workspace customer	Customer to which the group belongs.
Group ID	Unique ID of the group.
Group name	Name of the group.
Email address	Group's email address
Service item	Service item data for requesting the group through the IT Shop.
IT Shop	Specifies whether the group can be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. The group can still be assigned directly to hierarchical roles.
Only for use in IT Shop	Specifies whether the group can only be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. Direct assignment of the group to hierarchical roles or user accounts is not permitted.
Risk index	Value for evaluating the risk of assigning the group to user accounts. Set a value in the range 0 to 1. This input field is only visible if the QER \| CalculateRiskIndex configuration parameter is activated. For more information, see the .One Identity Manager Risk Assessment Administration Guide
Category	Categories for group inheritance. Groups can be selectively inherited by user accounts. To do this, groups and user accounts are divided into categories. Select one or more categories from the menu.
Description	Text field for additional explanation.
Is admin created	Specifies whether the group was created by an administrator. If this option is disable, the group was created by a user.
Aliases	List of additional email addresses under which emails can be sent to the group.
Non editable aliases	List of all email addresses that cannot be changed. These email addresses do not belong to the primary domain or its subdomains.

Related topics

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Nutzungsbedingungen Datenschutz Cookie Preference Center