In the case of indirect assignment, employees and disabled service plans are assigned to hierarchical roles, such as departments, cost centers, locations, or business roles. When assigning disabled Azure Active Directory service plans indirectly, check the following settings and modify them if necessary:
-
Assignment of employees and disabled Azure Active Directory service plans is permitted for role classes (departments, cost centers, locations, or business roles).
For more information, see the One Identity Manager Identity Management Base Module Administration Guide.
To configure assignments to roles of a role class
-
In the Manager, select role classes in the Organizations > Basic configuration data > Role classes category.
- OR -
In the Manager, select role classes in the Business roles > Basic configuration data > Role classes category.
-
Select the Configure role assignments task and configure the permitted assignments.
-
To generally allow an assignment, enable the Assignments allowed column.
-
To allow direct assignment, enable the Direct assignments permitted column.
-
- Save the changes.
-
-
Settings for assigning disabled Azure Active Directory service plans to Azure Active Directory user accounts.
-
The Azure Active Directory user account is linked to an employee.
-
The Azure Active Directory user account has the Disabled service plans can be inherited option set.
-