Tchater maintenant avec le support

Obtenir une aide instantanée
Terminer l’enregistrement

Se connecter

Demander les tarifs

Contacter le service des ventes

Identity Manager 8.1.4 - Identity Management Base Module Administration Guide

Parcourir le contenu

Basics for mapping company structures in One Identity Manager

Hierarchical role structure basic principles

Inheritance directions within a hierarchy Discontinuing inheritance

Basic principles for assigning company resources

Direct assignment Indirect assignment

Secondary assignment Primary assignment

Assignment by dynamic roles Assigning through IT Shop requests

Basics of calculating inheritance

Calculating inheritance by hierarchical roles Calculation of assignments

Preparing hierarchical roles for company resource assignments

Possible assignments of company resources through roles Permitting assignments of employees, devices, workdesks, and company resources Using roles to limit inheritance Inheritance exclusion: Specifying conflicting roles

Managing departments, cost centers, and locations

One Identity Manager users for organizations Basic data for structuring departments, cost centers, and locations

Role classes Role types Functional areas Attestors Role approvers and role approvers (IT)

Editing departments

General master data for a department Contact data for departments Functional area and risk assessment

Editing cost centers

General master data for a cost center Functional area and risk assessment

Editing locations

General master data for a location Location address information Configuring a location's network Directions to location Functional area and risk assessment

Assigning employees, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Setting up IT operating data

Modify IT operating data

Additional tasks for managing departments, cost centers, and locations

Creating dynamic roles for departments, cost centers, and locations Assign organizations Specifying inheritance exclusion for roles

Reports about departments, cost centers, and locations

Working with dynamic roles

Editing dynamic roles

Dynamic role master data

Conditions for dynamic roles Testing a condition of a dynamic role Calculating role memberships Additional tasks for dynamic roles

Dynamic role overview Start immediate recalculation of role memberships

Employee administration

One Identity Manager users for employee administration Basic data for employee master data

Business partners Creating custom mail templates for notifications

General properties of a mail template Creating and editing an email definition

Using base object properties

Customizing email signatures

Entering employee master data

General employee master data Organizational employee master data Address data Miscellaneous employee master data

Employee's central user account Employee's central password Employee's default email address Mapping multiple employee identities

Employee identity types

Disabling and deleting employees

Temporarily deactivating employees Permanently deactivating employees

Re-enabling an employee

Deferred deletion of employees Deleting all employee related data

Password policies for employees

Predefined password policies Using password policies

Changing the password policy for the password columns Assigning password policies to departments, cost centers, locations, and business roles

Editing password policies

General master data for password policies Policy settings Character classes for passwords

Custom scripts for password requirements

Script for checking passwords Script for generating a password

Defining the excluded list for passwords Checking a password Testing password generation Informing employees about expiring passwords Displaying locked employees and system users

Limited access to One Identity Manager

Changing the certification status of an employee

Assigning company resources to employees

Assigning employees to departments, cost centers, and locations Assigning employees to business roles Adding employees to IT Shop custom nodes Assigning application roles to employees Assigning resources directly to employees Assigning software directly to employees Assigning system roles directly to employees Assigning subscribable reports directly to employees

Displaying the origin of an employee's roles and entitlements Analyzing role memberships and employee assignments Additional tasks for managing employees

Employee overview Manually assigning user accounts to employees Entering calls for an employee Assigning extended properties Displaying and deleting employees' Webauthn security keys Setting a secret password question Mutual aid

Determining an employee’s language Determining an employee's working hours Employee reports

Managing devices and workdesks

Basic data for device admin

General master data for a device model Inventory data for a device model

Business partners Device status Workdesk status Workdesk types

Setting up a device

General master data for a device Device networking data

Assigning company resources to devices

Assigning devices to departments, cost centers, and locations Assigning devices to business roles

Additional tasks for managing devices

Overview of devices Assigning service agreements and enter calls

How to set up workdesks

General master data for a workdesk Workdesk location information Additional information about a workdesk

Assigning company resources to workdesks

Assigning workdesks to departments, cost centers, and locations Assigning workdesks to business roles Assigning software directly to workdesks Assigning system roles directly to workdesks

Additional tasks for managing workdesks

Workdesk overview Assigning devices to workdesks Assigning employees to workdesks

Asset data for devices

Basic data for asset management

Asset classes Asset types

Entering investments and investment plans Editing device asset data

Master data for asset data Commercial data

Managing resources

One Identity Manager users for managing resources Basic data for resources

Editing resources

Resource master data

Assigning resources to employees

Assigning resources to departments, cost centers, and locations Assigning resources to business roles Assigning resources directly to employees Adding resources to the IT Shop Adding resources in system roles

Additional tasks for managing resources

Resource overview Assigning extended properties to resources

Editing multi-request resources

Master data for a multi-request resource

Assigning multi-request resources to employees

Adding multi request resources to the IT Shop

Reports about resources

Setting up extended properties

One Identity Manager users for managing extended properties Create property groups Edit extended properties

Extended property master data Specifying scoped boundaries

Additional tasks for managing extended properties

Extended property overview Assign objects Assigning property groups

Configuration parameters for managing departments, cost centers, and locations Effective configuration parameters for setting up employees Configuration parameters for managing devices and workdesks

Assigning resources directly to employees

Resources can be assigned directly or indirectly to employees. Indirect assignment is carried out by allocating employees and resources in company structures, like departments, cost centers, locations, or business roles.

To react quickly to special requests, you can assign resources directly to employees.

To assign a resource directly to employees

Select the Entitlements | Resources category.
Select a resource in the result list.
Select the Assign to employees task.
In the Add assignments pane, add employees.
TIP: In the Remove assignments pane, you can remove assigned employees.

To remove an assignment
- Select the employee and double-click .
Save the changes.

Related topics

Adding resources to the IT Shop

Once a resource has been assigned to an IT Shop shelf, it can be requested by the shop customers. There are other prerequisites required to make a resource requestable.

The resource must be labeled with the IT Shop option.
The resource must be assigned to a service item.
The resource must be also labeled with the Only use in IT Shop option if it is only to be assigned to employees by means of IT Shop requests. Then, the resource may not be assigned directly to hierarchical roles.

To add a resource to the IT Shop

Select the Entitlements | Resources category.
Select a resource in the result list.
Select the Add to IT Shop task.
In the Add assignments pane, assign the resource to the IT Shop shelves.
Save the changes.

To remove a resource from individual IT Shop shelves

Select the Entitlements | Resources category.
Select a resource in the result list.
Select the Add to IT Shop task.
In the Remove assignments pane, remove the resource from the IT Shop shelves.
Save the changes.

To remove resource from all IT Shop shelves

Select the Entitlements | Resources category.
Select a resource in the result list.
Select the Remove from all shelves (IT Shop) task.
Confirm the security prompt with Yes.
Click OK.
The resource is removed from all shelves by the One Identity Manager Service. All requests and assignment requests with this resource are canceled in the process.

Related topics

Resource master data
One Identity Manager IT Shop Administration Guide

Adding resources in system roles

Installed modules:

System Roles Module

A resource can be added to different system roles. A system role that is only contains resources can be labeled with "Resource package". Resources can also be added to system roles that are not resource packages. When you assign a system role to an employee the resource is assigned to the employee.

NOTE: Resources with the “Only use in IT Shop“ option set can only be assigned to system roles that also have this option set.

To assign a resource to system roles

Select the Entitlements | Resources category.
Select a resource in the result list.
Select the Assign system roles task.
In the Add assignments pane, assign system roles.
- OR -

In the Remove assignments pane, remove system roles.
Save the changes.

Detailed information about this topic

One Identity Manager System Roles Administration Guide

Additional tasks for managing resources

After you have entered the master data, you can run the following tasks.

Resource overview

Assigning extended properties to resources

Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Conditions d’utilisation Confidentialité Cookie Preference Center