Chatta subito con l'assistenza
Chat con il supporto

Identity Manager 8.1.5 - Administration Guide for Connecting to SharePoint

Managing SharePoint environments Setting up SharePoint farm synchronization Basic data for managing a SharePoint environment SharePoint farms SharePoint web applications SharePoint site collections and sites SharePoint user accounts SharePoint roles and groups
SharePoint groups SharePoint roles and permission levels
Permissions for SharePoint web applications Reports about SharePoint site collections Configuration parameters for managing a SharePoint environment Default project template for SharePoint

Entering master data for SharePoint groups

Table 29: Configuration parameters for setting up SharePoint groups
Configuration parameter Meaning
QER\CalculateRiskIndex Preprocessor relevant configuration parameter controlling system components for calculating an employee's risk index. Changes to the parameter require recompiling the database.

If the parameter is enabled, values for the risk index can be entered and calculated.

Enter the following master data for a group.

Table 30: SharePoint group master data
Property Description
Display name Display name of the group.
Site collection Site collection the group is used in.
Owner Owner of the group. A SharePoint user account or a SharePoint group can be selected.
Service item Service item data for requesting the group through the IT Shop.
Distribution group alias Alias of the distribution group that the group is linked to.
Distribution group email Email address of the distribution group that the group is linked to.
Risk index

Value for evaluating the risk of assigning the group to user accounts. Enter a value between 0 and 1. This input field is only visible if the QER | CalculateRiskIndex configuration parameter is activated.

Category Categories for group inheritance. Groups can be selectively inherited by user accounts. To do this, groups and user accounts are divided into categories. Select one or more categories from the menu.
Description Text field for additional explanation.
Description (HTML) Additional information about the group in HTML format. (this is displayed in SharePoint in the description field "About me").
Memberships only visible to members Specifies whether only group members can see the list of members.
Group members can edit memberships Specifies whether all group members can edit the group memberships.
Request for membership permitted Specifies whether SharePoint users can request or end membership in these groups themselves.
Automatic membership on request Specifies whether SharePoint users automatically become members in the group once they request membership. The same applies when user end their membership.
Email address membership requested Email address that the group membership request or closure is sent to.

IT Shop

Specifies whether the group can be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. The group can still be assigned directly to hierarchical roles.

Only for use in IT Shop

Specifies whether the group can only be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. Direct assignment of the group to hierarchical roles or user accounts is not permitted.

Detailed information about this topic

Assigning SharePoint groups to SharePoint user accounts

Groups can be assigned directly or indirectly to employees. In the case of indirect assignment, employees, and groups are arranged in hierarchical roles. The number of groups assigned to an employee is calculated from the position in the hierarchy and the direction of inheritance.

If you add an employee to hierarchical roles and the employee owns a user authenticated user account, the user account is added to the group. Prerequisites for indirect assignment of employees to user accounts:

  • Assignment of employees and groups is permitted for role classes (departments, cost centers, locations, or business roles).
  • Group authenticated is not set in the user accounts.
  • User accounts are marked with the Groups can be inherited option.
  • User accounts and groups belong to the same site collection.

Groups can also be assigned to employees through IT Shop requests. So that groups can be assigned using IT Shop requests, employees are added to a shop as customers. All groups are assigned to this shop can be requested by the customers. Requested groups are assigned to the employees after approval is granted.

Detailed information about this topic

Assigning SharePoint groups to departments, cost centers and locations

Assign groups to departments, cost centers, and locations in order to assign user accounts to them through these organizations.

To assign a group to departments, cost centers, or locations (non role-based login)

  1. In the Manager, select the SharePoint | Groups category.

  2. Select the group in the result list.

  3. Select the Assign organizations task.

  4. In the Add assignments pane, assign the organizations:

    • On the Departments tab, assign departments.

    • On the Locations tab, assign locations.

    • On the Cost centers tab, assign cost centers.

    TIP: In the Remove assignments pane, you can remove assigned organizations.

    To remove an assignment

    • Select the organization and double-click .

  5. Save the changes.

To assign groups to a department, cost center, or location (role-based login)

  1. In the Manager, select the Organizations | Departments category.

    - OR -

    In the Manager, select the Organizations | Cost centers category.

    - OR -

    In the Manager, select the Organizations | Locations category.

  2. Select the department, cost center, or location in the result list.

  3. Select the Assign SharePoint groups task.

  4. In the Add assignments pane, assign groups.

    TIP: In the Remove assignments pane, you can remove the assignment of groups.

    To remove an assignment

    • Select the group and double-click .
  5. Save the changes.
Related topics

Assigning SharePoint groups to business roles

Installed modules: Business Roles Module

You assign groups to business roles in order to assign them to user accounts though business roles.

To assign a group to a business role (non role-based login)

  1. In the Manager, select the SharePoint | Groups category.

  2. Select the group in the result list.

  3. Select the Assign business roles task.

  4. In the Add assignments pane, assign business roles.

    TIP: In the Remove assignments pane, you can remove assigned business roles.

    To remove an assignment

    • Select the business role and double-click .

  5. Save the changes.

To assign groups to a business role (non role-based login)

  1. In the Manager, select the Business roles | <role class> category.

  2. Select the business role in the result list.

  3. Select the Assign SharePoint groups task.

  4. In the Add assignments pane, assign groups.

    TIP: In the Remove assignments pane, you can remove the assignment of groups.

    To remove an assignment

    • Select the group and double-click .
  5. Save the changes.
Related topics
Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione