Chatta subito con l'assistenza
Chat con il supporto

Identity Manager 8.1.5 - Administration Guide for Connecting to SharePoint

Managing SharePoint environments Setting up SharePoint farm synchronization Basic data for managing a SharePoint environment SharePoint farms SharePoint web applications SharePoint site collections and sites SharePoint user accounts SharePoint roles and groups
SharePoint groups SharePoint roles and permission levels
Permissions for SharePoint web applications Reports about SharePoint site collections Configuration parameters for managing a SharePoint environment Default project template for SharePoint

Assigning SharePoint user accounts directly to a SharePoint role

SharePoint roles can be assigned directly or indirectly to user accounts. Indirect assignment can only be used for user authenticated user accounts. Direct assignment can only be used for group and user authenticated user accounts.

User accounts and SharePoint roles must belong to the same site collection.

NOTE: SharePoint roles that reference permission levels and have the option hidden set, cannot be assigned to user accounts.

To assign a SharePoint role directly to user accounts

  1. Select the SharePoint | Hierarchical view | <Farm> | Web applications | <web application> | <site collection> | <site> | Roles category.
  2. Select the role in the result list.
  3. Select the Assign user accounts task.
  4. In the Add assignments pane, assign user accounts.

    - OR -

    In the Remove assignments pane, remove user accounts.

  5. Save the changes.
Related topics

Assigning SharePoint groups to SharePoint roles

In order for SharePoint user groups to obtain permissions for individual websites, assign SharePoint roles to the groups. SharePoint roles and groups must belong to the same site collection.

NOTE: SharePoint roles with the Hidden option enabled that reference permission levels, cannot be assigned to groups.

To assign groups to a SharePoint role

  1. Select the SharePoint | Hierarchical view | <Farm> | Web applications | <web application> | <site collection> | <site> | Roles category.
  2. Select the role in the result list.
  3. Select the Assign groups task.
  4. In the Add assignments pane, assign groups.

    - OR -

    In the Remove assignments pane, remove groups.

  5. Save the changes.
Related topics

Adding SharePoint roles to system roles

Installed modules: System Roles Module

Use this task to add a SharePoint role to system roles. If you assign a system role to employees, all the employees' user authenticated user accounts inherit the SharePoint role.

NOTE: If the SharePoint role references a permission level for which the Hidden option is enabled, system roles cannot be assigned. These SharePoint roles cannot be assigned to user accounts or groups, either directly or indirectly. For more information, see Entering master data for SharePoint permission levels.
NOTE: SharePoint roles with the Only use in IT Shop option set, can only be assigned to system roles that also have this option set. For more information, see theOne Identity Manager System Roles Administration Guide.

To assign a SharePoint role to system roles

  1. Select the SharePoint | Hierarchical view | <Farm> | Web applications | <web application> | <site collection> | <site> | Roles category.
  2. Select the role in the result list.
  3. Select the Assign system roles task.

  4. In the Add assignments pane, assign system roles.

    TIP: In the Remove assignments pane, you can remove assigned system roles.

    To remove an assignment

    • Select the system role and double-click .

  5. Save the changes.
Related topics

Adding SharePoint roles to the IT Shop

Once a SharePoint role has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed.

  • The SharePoint role must be labeled with the IT Shop option.
  • The SharePoint role must be assigned to a service item.
  • The SharePoint role must be also labeled with the Only use in IT Shop option if the SharePoint role can only be assigned to employees using IT Shop requests. Direct assignment to hierarchical roles may not be possible.
NOTE: IT Shop administrators can assign SharePoint roles to IT Shop shelves in the case of role-based login. Target system administrators are not authorized to add SharePoint roles in the IT Shop.

To add a SharePoint role to the IT Shop

  1. Select the SharePoint | Hierarchical view | <Farm> | Web applications | <web application> | <site collection> | <site> | Roles category.
  2. Select the role in the result list.
  3. Select the Add to IT Shop task.
  4. In the Add assignments pane, assign the IT Shop shelves.
  5. Save the changes.

To remove a SharePoint role from individual IT Shop shelves

  1. Select the SharePoint | Hierarchical view | <Farm> | Web applications | <web application> | <site collection> | <site> | Roles category.
  2. Select the role in the result list.
  3. Select the Add to IT Shop task.
  4. In the Remove assignments pane, remove the group from the IT Shop shelves.
  5. Save the changes.

To remove a SharePoint roles from all IT Shop shelves

  1. Select the SharePoint | Hierarchical view | <Farm> | Web applications | <web application> | <site collection> | <site> | Roles category.
  2. Select the role in the result list.
  3. Select the Remove from all shelves (IT Shop) task.
  4. Confirm the security prompt with Yes.
  5. Click OK.

The SharePoint role is removed from all shelves by the One Identity Manager Service. All requests and assignment requests are canceled along with the SharePoint role as a result.

Detailed information about this topic
  • One Identity Manager IT Shop Administration Guide
Related topics
Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione