Multi-request resources
The IT Shop distinguishes between single or multiple requestable products. Single request products are, for example, software, system roles, or Active Directory groups. These products cannot be requested if they have already been be requested for the same time period.
Furthermore, an employee may need several of one type of company resources, for example, consumables. You can find company resources such as these mapped in One Identity Manager as Multi-request resource or Multi requestable/unsubscribable resources.
Table 3: Resource types
|
Resources |
Resources that an employee (workstation, device) may own just once.
The resources can be requested in the IT Shop just once. The resources are assigned to the employees after approval has been granted. They remain assigned until the request is canceled. You can request them again a later point.
Example: phone, company car. |
QERResource |
|
Multi-request resources |
Resources that can be requested more than once in the IT Shop. Requests are automatically canceled once approved. The resources are not explicitly assigned to employees.
Example: resource for requesting remote desktop sessions for assets in a PAM system; consumables, such as pens, printing paper. |
QERReuse |
|
Multi-requestable/unsubscribable resources |
Resources that an employee can request more than once in the IT Shop but must return them explicitly once they are no longer needed. The resources are assigned to the employees after approval has been granted. They remain assigned until the request is canceled.
Example: printer, monitor. |
QERReuseUS |
To set up multi-request resources and add them as products in the IT Shop
-
In the Manager, select the Entitlements | Multi-request resources for IT Shop category.
-
Click 
in the result list.
-
Edit the resource's master data.
- Save the changes.
-
Select the Add to IT Shop task.
In the Add assignments pane, assign a shelf.
TIP: In the Remove assignments pane, you can remove shelf assignments.
To remove an assignment
- Save the changes.
To set up multi-requestable/unsubscribable resources and to add them as products to the IT Shop
-
Select the Entitlements | Multi requestable/unsubscribable resources for IT Shop category.
-
Click in the result list.
-
Edit the resource's master data.
- Save the changes.
-
Select the Add to IT Shop task.
In the Add assignments pane, assign a shelf.
TIP: In the Remove assignments pane, you can remove shelf assignments.
To remove an assignment
- Save the changes.
For more information about multi requestable products, see the One Identity Manager Identity Management Base Module Administration Guide.
Preparing products for requesting
Company resources have to fulfill at least the following prerequisites before you can request them in the Web Portal:
-
The company resource must be labeled with the IT Shop option.
-
A service item must be assigned to the company resource.
-
The company resource must be assigned to a shelf as a product.
-
If the company resource is only assigned to employees using IT Shop requests, the company resource must also be labeled with the Only use in IT Shop option. This means that the company resource cannot be directly assigned to roles outside the IT Shop.
The Entitlements category displays all company resources that can be requested using the IT Shop. This includes software, system entitlements, system roles, account definitions, resources, multi-request resources, and assignment resources if the corresponding modules are installed.
You can prepare the company resources for requesting in the IT Shop if you are an IT Shop administrator and have logged in as role-based. You can assign service items, edit the IT Shop and Only use in IT Shop options and assign the company resources to IT Shop shelves.
To prepare company resources for requesting
-
In the Manager, select the Permissions category.
-
From the navigation view and results list, select the company resources you want and result list.
-
Select the Change master data task.
-
Enable the IT Shop option.
-
Assign a new service item in the Service item field.
To add a new service item, click . Copy the name of the company resource as identifier for the service item. Enter the other properties on the service item master data form.
- Save the changes.
-
Select the Add to IT Shop task.
-
In the Add assignments pane, assign the company resource to shelves.
- Save the changes.
Customer keep their requested products on the shelf until they unsubscribe them. Sometimes, however, products are only required for a certain length of time and can be canceled automatically after this time. There are other settings required to provide limited period products.
Detailed information about this topic
Entering service items
In order to request company resources in the Web Portal, a service item must be assigned to them. Service items contain additional information about the company resources. For example, you can specify article numbers, request properties, product supervisors, or approvers for requests. A service catalog can be put together from the service items the Web Portal. These contain all the requestable products. You can use service categories, tags, and service item names to find the product in the service catalog.
To edit service items
-
In the Manager, select the IT Shop | Service catalog | Hierarchical by service categories | <service category> category.
- OR -
In the Manager, select the IT Shop | Service catalog | Hierarchical by service categories | Singles category.
-
In the result list, select the product's service item and select the Change master data task.
- OR -
Click in the result list.
-
Enter the service item's master data.
- Save the changes.
General master data for a service item
Enter the following data on the General tab. If you add a new service item, you must fill out the required fields.
Table 4: General master data for a service item
|
Service item |
Service item name. |
|
Special service item |
If a product is used for a specific purpose, for example, for product collection, then mark it as a special service item. |
|
Service category |
Group individual products into a collection of products. Select an existing service category from the list or add a new one.
To create a new service category, click . Enter at least one name for the service item. |
|
Product owners |
Assign a Request & Fulfillment | IT Shop | Product owner application role.
Product owners can be used as approvers in a defined approval process within the IT Shop. They can decide on approval of the service item request.
To create a new application role, click . Enter the application role name and assign a parent application role.
If no product owner is assigned, the product owner of the assigned service category is determined by template. |
|
Attestors |
Assign a Request & Fulfillment | IT Shop | Attestor application role.
The members of this application role can chosen as attestor in an attestation procedure.
To create a new application role, click . Enter the application role name and assign a parent application role. |
|
Cost center |
Cost center for booking the service item in the accounts. |
|
Manufacturer |
Manufacturer data. |
|
Terms of use |
Terms of use for the product. The product can only be requested if the requester has accepted the terms of use. |
|
Request number, product code, product code (foreign). |
Company-specific service item properties. |
|
Functional area |
Company-specific service item property. |
|
Approval policies |
Approval policy used to determine the approver when the service item is requested in the IT Shop. |
|
Request property |
Select the group for defining extended properties for a request. The request properties are displayed in the Web Portal depending on the configuration, requester, or approver. |
|
Calculation info |
Enter the calculation mode as accounting information. |
|
Availability |
Company-specific information about the service item‘s availability. |
|
Sort order |
Customer-specific criteria for sorting service items. |
|
Website |
Web page with more information about the service item.
This field allows you to link product descriptions in the internet or intranet to the service item. To open the website, select Visit website in the default web browser. |
|
Validity period |
Time period for limited assignments through IT Shop.
The service item is automatically canceled when the time expires. When multi-request resources are requested (QERReuse), this value has no effect. |
|
Description |
Text field for additional explanation. |
|
Retain service item assignment on relocation |
Specifies whether requests belonging to this service item remain intact when a customer or a product relocates.. |
|
Not available |
Specifies whether the service item can still be requested in the IT Shop.
If this option is enabled, no new requests can be placed for this item. Existing requests remain intact. |
|
Request properties must be defined separately per recipient |
Specifies whether additional request properties must be entered separately for each recipient of this product, if the product is requested for different recipients in one request procedure.
If this option is not set, the selected requested properties apply uniformly to all recipients of the product. |
|
Approval by multi-factor authentication |
The approval of requests with this service item requires multi-factor authentication. |
For detailed information about attestation, see the One Identity Manager Attestation Administration Guide. For detailed information about cost centers, see the One Identity Manager Identity Management Base Module Administration Guide.
Detailed information about this topic
.