The SecurityMatrix for SubTemplate can be populated into the EPCMatrixSubTemplate table using a custom solution implemented in the customer environment.
There could be scenarios where the customer would prefer alternate sources for security matrix import other than a csv file, for example a direct interface from the Epic Database or a custom application based on their implementation.
The Security Matrix for SubTemplate once imported could be viewed using One Identity Manager.
To view the imported matrix
A grid would be displayed with the SubTemplate and the corresponding Property values for Identity.
The Epic user account can inherit SubTemplates from security matrix based on the properties mapped between the Identity and the matrix, provided that the Is Template Update Disabled flag for the user account is set to false.
The assignments inherited by the user from the Security Matrix has an XOrigin set to Matrix.
The User account SubTemplate assignments are updated in the following cases:
The following configuration parameters are additionally available in One Identity Manager after the module has been installed.
| Configuration parameter | Description |
| TargetSystem|Epic Healthcare |
Preprocessor relevant configuration parameter for controlling the database model components for the administration of the target system Epic Healthcare. If the parameter is set, the target system components are available. Changes to this parameter require the database to be recompiled. |
| TargetSystem|EPC|Accounts | This configuration parameter permits configuration of user account data. |
| TargetSystem | EPC | Accounts | InitialRandomPassword |
This configuration parameter specifies whether a random generated password is issued when a new user account is added. The password must contain at least those character sets that are defined in the password policy. |
| TargetSystem | EPC | Accounts | InitialRandomPassword | SendTo |
This configuration parameter specifies to which employee the email with the randomly generated password should be sent (manager cost center/department/location/role, employee’s manager or XUserInserted). If no recipient can be found, the password is sent to the address stored in the TargetSystem | EPC | DefaultAddress configuration parameter. |
| TargetSystem | EPC | Accounts | InitialRandomPassword | SendTo |MailTemplateAccountName |
This configuration parameter contains the name of the mail template sent to provide users with the login data for their user accounts. The Employee - new user account created mail template is used. |
| TargetSystem | EPC | Accounts | InitialRandomPassword | SendTo | MailTemplatePassword |
This configuration parameter contains the name of the mail template sent to provide users with information about their initial password. The Employee - initial password for new user account mail template is used. |
| TargetSystem | EPC | Accounts | MailTemplateDefaultValues |
This configuration parameter contains the mail template used to send notifications if default IT operating data mapping values are used for automatically creating a user account. The Employee - new user account with default properties created mail template is used. |
| TargetSystem | EPC | DefaultAddress | The configuration parameter contains the recipient's default email address for sending notifications about actions in the target system. |
| TargetSystem | EPC | PersonAutoDefault | This configuration parameter specifies the mode for automatic employee assignment for user accounts added to the database outside synchronization. |
| TargetSystem | EPC | PersonAutoDisabledAccounts | This configuration parameter specifies whether employees are automatically assigned to disable user accounts. User accounts do not obtain an account definition. |
| TargetSystem | EPC | PersonAutoFullSync | This configuration parameter specifies the mode for automatic employee assignment for user accounts added to or updated in the database through synchronization. |
| TargetSystem | EPC | PersonExcludeList |
List of all user accounts for which automatic employee assignment should not take place. Names are listed in a pipe (|) delimited list that is handled as a regular search pattern. Example: ADMINISTRATOR |
| TargetSytem |EPC|SubTemplateDefaultPriority | This configuration parameter specifies the SubTemplate default priority to be assigned for direct and base tree assignments. the default value is set to 4 and can be updated. |
| TargetSystem|EPC| SubTemplateMatrixPriority |
This parameter specifies the SubTemplate default priority for SecurityMatrix assignments. The default value is 1 and can be updated. |
| TargetSystem|EPC| AutoSetAppliedEMPTemplate |
If a user receives an EMPTemplate through base tree or SecurityMatrix inheritance and AutoSetAppliedEMPTemplate parameter value is 1, then the EMPTemplate is automatically set as the Applied and Default EMPTemplate for the user. The default value is set to 0 and can be updated. |
|
TargetSystem | EPC | Accounts | NotRequirePasswor |
This configuration parameter determines whether a password is generated for the user. If this configuration parameter is set to 1 then no password is generated for the user. If this configuration parameter is not set to 1 and the Initial Random Password configuration parameter is enabled, then a password is generated for the user. The default value of this configuration parameter is set to 1. |
© ALL RIGHTS RESERVED. Termini di utilizzo Privacy Cookie Preference Center
