Identity Manager 9.0 LTS - Target System Base Module Administration Guide

Basic mechanisms for employee and user account administration

Employee and user account administration Handling employees and user accounts Using account definitions to create user accounts

Account definitions and manage levels Assigning account definitions to employees Determining valid IT operating data for the target systems IT operating data for the One Identity Manager default configuration Employee's central user account Employee's default email address Changing employee main data Templates and processes for implementing account definitions Examples for implementing several account definitions within a target system type

Assigning employees automatically to user accounts

Configuring automatic employee assignment Editing search criteria for automatic employee assignment Define search criteria for employee assignment Finding employees and directly assigning them to user accounts Modifying scripts for automatic employee assignment

Deactivating and deleting employees and user accounts

Temporarily deactivating employees Permanently deactivating employees Deferred deletion of an employee Disabling and deleting using account definitions

The Unified Namespace

Mapping target system objects in Unified Namespace Special features for mapping object properties One Identity Manager users for managing target systems in Unified Namespace Displaying Unified Namespace objects Reports about a target system in the Unified Namespace Reports about all target systems in the Unified Namespace

Displaying Unified Namespace objects

NOTE: The object properties and assignments cannot be edited in the Unified Namespace. Use the Show base object task to change to the connected target system object. As target system administrator, you can edit the objects of your target system as usual.

To display Unified Namespace objects

In the Manager, select the Unified Namespace category.

User accounts, system entitlements and structure elements of all the connected target systems are displayed hierarchically in the navigation view. This shows the main data and existing assignments of all objects. The object properties and assignments cannot be edited.

Reports about a target system in the Unified Namespace

One Identity Manager supplies various reports with information about a target system mapped in the Unified Namespace.

Table 10: Data quality target system report
Report	Published for	Description
Show overview	User account	This report shows an overview of the user account and the assigned permissions.
Show overview including origin	User account	This report shows an overview of the user account and origin of the assigned permissions.
Show overview including history	User account	This report shows an overview of the user accounts including its history. Select the end date for displaying the history (Min. date). Older changes and assignments that were removed before this date, are not shown in the report.
Show user accounts overview (incl. history)	Container	This report shows all the container's user accounts with their permissions including a history. Select the end date for displaying the history (Min. date). Older changes and assignments that were removed before this date, are not shown in the report.
Show system entitlements overview (incl. history)	Container	This report shows the container's system entitlements with the assigned user accounts including a history. Select the end date for displaying the history (Min. date). Older changes and assignments that were removed before this date, are not shown in the report.
Overview of all assignments	Container	This report finds all roles containing employees with at least one user account in the selected container.
Overview of all assignments	System entitlement	This report finds all roles containing employees who have the selected system entitlement.
Show overview	System entitlement	This report shows an overview of the system entitlement and its assignments.
Show overview including origin	System entitlement	This report shows an overview of the system entitlement and origin of the assigned user accounts.
Show overview including history	System entitlement	This report shows an overview of the system entitlement and including its history. Select the end date for displaying the history (Min. date). Older changes and assignments that were removed before this date, are not shown in the report.
Show historical memberships	System entitlement	This report shows all employees that are assigned a user account from this system entitlement including the duration of the membership. Select the end date for displaying the history (Min. date). Older changes and assignments that were removed before this date, are not shown in the report.
Show entitlement drifts	Target system	This report shows all system entitlements that are the result of manual operations in the target system rather than provisioned by One Identity Manager.
Show user accounts overview (incl. history)	Target system	This report returns all the user accounts with their permissions including a history. Select the end date for displaying the history (Min. date). Older changes and assignments that were removed before this date, are not shown in the report.
Show user accounts with an above average number of system entitlements	Target system	This report contains all user accounts with an above average number of system entitlements.
Show employees with multiple user accounts	Target system	This report shows all the employees that have multiple user accounts. The report contains a risk assessment.
Show system entitlements overview (incl. history)	Target system	This report shows the system entitlements with the assigned user accounts including a history. Select the end date for displaying the history (Min. date). Older changes and assignments that were removed before this date, are not shown in the report.
Overview of all assignments	Target system	This report finds all roles containing employees with at least one user account in the selected target system.
Show unused user accounts	Target system	This report contains all user accounts, which have not been used in the last few months.
Show orphaned user accounts	Target system	This report shows all user accounts to which no employee is assigned.
Show user account operations	Target system	This report shows modified user accounts from all target systems for a specific time period.

Reports about all target systems in the Unified Namespace

One Identity Manager supplies various report with information about all the target systems mapped in the Unified Namespace. The data is combined and grouped by target system type.

Table 11: Data quality analysis report
Report	Description
Orphaned user accounts in all target systems	This report shows all user accounts to which no employee is assigned. You can find the report in the My One Identity Manager > Data quality analysis category.
Unused user accounts in all target systems	This report contains all user accounts, which have not been used in the last few months. You can find the report in the My One Identity Manager > Data quality analysis category.
System entitlement drifts in all target systems	This report shows all system entitlements that are the result of manual operations in the target system rather than provisioned by One Identity Manager. You can find the report in the My One Identity Manager > Data quality analysis category.
User accounts with an above average number of system entitlements	This report contains all user accounts with an above average number of system entitlements. You can find the report in the My One Identity Manager > Data quality analysis category.
Unified Namespace user account system entitlements distribution	The report shows an overview of the distribution of user accounts and system authorizations in Unified Namespace. You can find the report in the My One Identity Manager > Target system overviews category.
User account operations across all systems	This report shows modified user accounts from all target systems for a specific time period. You can find the report in the My One Identity Manager > Target system overviews category.

Seleziona il prodotto:

Per una maggiore efficacia, compilare l'Obiettivo della chat:

Soluzioni consigliate per il problema

Identity Manager 9.0 LTS - Target System Base Module Administration Guide

Displaying Unified Namespace objects

Reports about a target system in the Unified Namespace

Reports about all target systems in the Unified Namespace