Tchater maintenant avec le support
Tchattez avec un ingénieur du support

Identity Manager 8.2 - Authorization and Authentication Guide

About this guide One Identity Manager application roles Granting One Identity Manager schema permissions through permissions groups Managing permissions to program features One Identity Manager authentication modules OAuth 2.0 / OpenID Connect configuration Multi-factor authentication in One Identity Manager Authenticating other applications using OAuth 2.0/OpenID Connect Granular permissions for the SQL Server and database Installing One Identity Redistributable STS Program functions for starting the One Identity Manager tools Minimum access levels of One Identity Manager tools

Dependencies between permissions groups

By structuring permissions groups hierarchically, permissions and user interface components can be passed down from one permissions group to another permissions group. This means that inheritance is top down within the hierarchy.

The following applies to permissions group dependencies:

  • A role-based permissions group can inherit from role-based permissions groups and non role-based permissions groups.

  • A non role-based permissions group can inherit from non role-based permissions groups. A non role-based permissions group must not inherit from role-based permissions groups.

Example:

Two permission groups are defined with the following permissions and user interface components.

Permissions group Permissions User interface

A

Viewable

Menu structures and forms

B

Editable

Task definitions

Permissions group B is assigned below permissions group A in the hierarchy and inherits from permissions group A. Consequently, a user of permissions group B has access to the viewing permissions and editing permissions as well as the menu structure, forms, and task definitions.

Related topics

Permissions group dependencies

You edit dependencies between permissions groups in the hierarchical view of the User & Permissions Group Editor. Permissions groups that are higher up in the hierarchy are displayed further to the right in the User & Permissions Group Editor‘s hierarchical. When a permissions group is selected in the hierarchical view, dependencies to other permissions groups are marked in color thus showing the direction of inheritance.

Figure 1: Visual of the permissions group hierarchy (inheritance from right to left)

Table 20: Meaning of colors in the hierarchical representation
Color Meaning

Blue

The selected permissions group.

Purple

This permissions group is a child of the selected permissions group and directly inherits from the selected permissions group.

Light purple

This permissions group inherits indirectly from the selected permissions group over the hierarchy.

Red

This permissions group is a child of the selected permissions group and directly inherits from the selected permissions group.

Light red

This permissions group passes inheritance indirectly to the selected permissions group over the hierarchy.

Green

This permissions group does not inherit or pass inheritance to the selected permissions group.

To specify dependencies of a permissions group

  1. In the Designer, select the Permissions > Permissions groups category.

  2. Select the permissions group and start the User & Permissions Group Editor using the Edit permissions group task.

  3. In the hierarchical view of the permissions groups, select the permissions group and run one of the following actions.

    • Select the Inherit permissions from context menu and select the permissions groups from which the selected permissions group is to inherit.

    • Select the Permissions inherited by context menu and select the permissions groups to be included in the selected permissions group. Child permissions groups inherit permissions from the selected permissions group.

  4. Select the Database > Save to database and click Save.

Copying permissions groups

The User & Permissions Group Editor provides a wizard for copying permissions and the user interface of an existing permissions group to a new permissions group.

To copy a permissions group

  1. In the Designer, select the Permissions > Permissions groups category.

  2. Select the permissions group you want to copy and start the User & Permissions Group Editor with the Edit permissions group task.

  3. Select the Permissions groups > Copy permissions group menu item.

  4. On the start page of the wizard for copying permissions groups, click Next.

  5. On the Select permissions group page, enter the following information:

    • Select permissions group to copy: The permissions group is pre-selected.

    • Copy name: Name of the new permissions group. A name suggestion is already entered that you can modify. Ensure that the permissions group name begins with the prefix CCC.

  6. On the Select copy options page, specify which permissions group relations are to be copied. You can select multiple options. The following copy options are available.

    Table 21: Copy options for permissions groups
    Option Description

    Permissions

    Enable this option to copy the table permissions and column permissions of the selected permissions group to the new permissions group.

    User interface

    Enable this option to copy the menu items, the forms and the task definitions of the selected permissions group to the new permissions group.

    System user

    Select this option if the system user should be copied to the new permissions group.

    NOTE: Predefined system users are not included in the new permissions group.

  7. To start compiling, click Next.

    The copying process may take some time.

  8. The Copy permissions group page shows the individual copy steps and any error messages. If the copy action is complete, click Next.

  9. To end the wizard, click Finish on the last page.

Related topics

Creating permissions groups

To create a permissions group

  1. In the Designer, select the Permissions category.

  2. Start the User & Permissions Group Editor with the Show / edit permissions group task.

  3. Add a new permissions group using the Permissions groups > New menu item.

  4. Edit the main data of the permissions group.

  5. Select the Database > Save to database and click Save.

Related topics
Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation