Chatta subito con l'assistenza

Ottieni assistenza in tempo reale
Completa la registrazione

Accedi

Richiedi prezzo

Contatta il supporto vendite

Identity Manager 8.1.5 - Administration Guide for Connecting to SharePoint

Table of Contents

Managing SharePoint environments

Architecture overview One Identity Manager users for managing SharePoint Claims-based authentication

Setting up SharePoint farm synchronization

Users and permissions for synchronizing with a SharePoint farm Setting up the synchronization server Creating a synchronization project for initial synchronization of a SharePoint farm Special synchronization cases for valid permissions Displaying synchronization results Customizing the synchronization configuration

How to configure SharePoint synchronization Configuring synchronization of several SharePoint farms Updating schemas

Speeding up synchronization with revision filtering Post-processing outstanding objects Configuring the provisioning of memberships Accelerating provisioning and single object synchronization Help for the analysis of synchronization issues Disabling synchronization

Basic data for managing a SharePoint environment

Authentication modes Prefixes Zones and alternative URLs SharePoint site templates SharePoint permissions SharePoint quotas SharePoint languages Editing a server

Master data for a Job server Specifying server functions

Target system managers Setting up account definitions

Creating an account definition

Master data for an account definition

Creating manage levels

Master data for manage levels

Creating a formatting rule for IT operating data Collecting IT operating data Modify IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning an account definition to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions to the IT Shop

Assigning account definitions to a target system Deleting an account definition

SharePoint farms

General master data for a SharePoint farm How to edit a synchronization project

SharePoint web applications SharePoint site collections and sites

SharePoint site collections

General master data for a site collection Specifying categories for inheriting SharePoint groups

SharePoint sites

General master data for a site Address data for a site Site design properties Additional tasks for managing sites Passing on permissions to child sites

Setting up SharePoint site collections and sites

SharePoint user accounts

Supported user account types Entering master data for SharePoint user accounts

Group authenticated user account master data User authenticated user account master data

Additional tasks for managing SharePoint user accounts

Displaying the SharePoint user account overview Assigning SharePoint groups directly to a SharePoint user account Assigning SharePoint roles directly to user accounts Assigning extended properties

Using custom authentication modes Automatic assignment of employees to SharePoint user accounts

Editing search criteria for automatic employee assignment

Deleting and restoring SharePoint user accounts

SharePoint roles and groups

SharePoint groups

Entering master data for SharePoint groups Assigning SharePoint groups to SharePoint user accounts

Assigning SharePoint groups to departments, cost centers and locations Assigning SharePoint groups to business roles Assigning SharePoint user accounts directly to a SharePoint group Assigning SharePoint roles to SharePoint groups Adding SharePoint groups to system roles Adding SharePoint groups to the IT Shop Adding SharePoint groups automatically to the IT Shop

Additional tasks for managing SharePoint groups

Displaying an overview of SharePoint groups Effectiveness of group memberships SharePoint group inheritance based on categories Assigning extended properties to SharePoint groups

Deleting SharePoint groups Default solutions for requesting SharePoint groups

Adding SharePoint groups SharePointRequesting Groups Memberships

SharePoint roles and permission levels

Entering master data for SharePoint permission levels Additional tasks for managing SharePoint permission levels

Displaying the SharePoint permission level overview Assigning permissions

Special synchronization cases for valid permissions Entering master data for SharePoint roles Assigning SharePoint roles to SharePoint user accounts

Assigning SharePoint roles to departments, cost centers and locations Assigning SharePoint roles to business roles Assigning SharePoint user accounts directly to a SharePoint role Assigning SharePoint groups to SharePoint roles Adding SharePoint roles to system roles Adding SharePoint roles to the IT Shop

Additional tasks for managing SharePoint roles

Displaying the SharePoint rules overview Effectiveness of SharePoint roles

Deleting SharePoint roles and permission levels

Permissions for SharePoint web applications

SharePoint permission policies SharePoint user policies

Reports about SharePoint site collections

Overview of all assignments

Configuration parameters for managing a SharePoint environment Default project template for SharePoint

Assigning SharePoint user accounts directly to a SharePoint group

Groups can be assigned directly or indirectly to user accounts. Indirect assignment can only be used for user authenticated user accounts. Direct assignment can only be used for group and user authenticated user accounts.

User accounts and groups must belong to the same site collection.

To assign a group directly to user accounts

Select the SharePoint | Groups category.
Select the group in the result list.
Select the Assign user accounts task.
In the Add assignments pane, assign user accounts.
- OR -

In the Remove assignments pane, remove user accounts.
Save the changes.

Related topics

Assigning SharePoint roles to SharePoint groups

In order for SharePoint user groups to obtain permissions for individual websites, assign SharePoint roles to the groups. SharePoint roles and groups must belong to the same site collection.

NOTE: SharePoint roles with the Hidden option enabled that reference permission levels, cannot be assigned to groups.

To assign SharePoint roles to a group

Select the SharePoint | Groups category.
Select the group in the result list.
Select the Assign SharePoint roles task.
In the Add assignments pane, assign roles.
- OR -

In the Remove assignments pane, remove the roles.
Save the changes.

Related topics

Adding SharePoint groups to system roles

Installed modules:

System Roles Module

Use this task to add a group to system roles. If you assign a system role to employees, all the user authenticated user accounts belonging to these employees inherit the group.

NOTE: Groups with Only use in IT Shop set can only be assigned to system roles that also have this option set. For more detailed information, see the One Identity Manager System Roles Administration Guide.

To assign a group to system roles

In the Manager, select the SharePoint | Groups category.
Select the group in the result list.
Select the Assign system roles task.
In the Add assignments pane, assign system roles.
TIP: In the Remove assignments pane, you can remove assigned system roles.

To remove an assignment
- Select the system role and double-click .
Save the changes.

Related topics

Adding SharePoint groups to the IT Shop

When you assign a group to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed:

The group must be labeled with the IT Shop option.
The group must be assigned a service item.

TIP: In the Web Portal, all products that can be requested are grouped together by service category. To make the group easier to find in the Web Portal, assign a service category to the service item.
If you only want the group to be assigned to employees through IT Shop requests, the group must also be labeled with the Use only in IT Shop option. Direct assignment to hierarchical roles or user accounts is no longer permitted.

NOTE: With role-based login, the IT Shop administrators can assign groups to IT Shop shelves. Target system administrators are not authorized to add groups to IT Shop.

To add a group to the IT Shop.

In the Manager select the SharePoint | Groups category (non role-based login) category.

- OR -

In the Manager, select the Entitlements | SharePoint groups (role-based login) category.
In the result list, select the group.
Select the Add to IT Shop task.
In the Add assignments pane, assign the group to the IT Shop shelves.
Save the changes.

To remove a group from individual shelves of the IT Shop

In the Manager select the SharePoint | Groups category (non role-based login) category.

- OR -

In the Manager, select the Entitlements | SharePoint groups (role-based login) category.
In the result list, select the group.
Select the Add to IT Shop task.
In the Remove assignments pane, remove the group from the IT Shop shelves.
Save the changes.

To remove a group from all shelves of the IT Shop

In the Manager, select the SharePoint | Groups category (non role-based login) category.

- OR -

In the Manager, select the Entitlements | SharePoint groups (role-based login) category.
In the result list, select the group.
Select the Remove from all shelves (IT Shop) task.
Confirm the security prompt with Yes.
Click OK.
The group is removed from all shelves by the One Identity Manager Service. All requests and assignment requests with this group, are canceled.

For more detailed information about requesting company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related topics

Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione

© ALL RIGHTS RESERVED. Feedback Termini di utilizzo Privacy Cookie Preference Center