サポートと今すぐチャット
サポートとのチャット

Identity Manager 8.1.4 - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Managing departments, cost centers, and locations Working with dynamic roles Employee administration
One Identity Manager users for employee administration Basic data for employee master data Entering employee master data Employee's central user account Employee's central password Employee's default email address Mapping multiple employee identities Disabling and deleting employees Password policies for employees Limited access to One Identity Manager Assigning company resources to employees Displaying the origin of an employee's roles and entitlements Analyzing role memberships and employee assignments Additional tasks for managing employees Determining an employee’s language Determining an employee's working hours Employee reports
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Effective configuration parameters for setting up employees Configuration parameters for managing devices and workdesks

Additional tasks for managing departments, cost centers, and locations

After you have entered the master data, you can run the following tasks.

Creating dynamic roles for departments, cost centers, and locations

Use this task to define dynamic roles for single departments, cost centers or location. This allows you to specify memberships in these roles.

NOTE:Create dynamic role is only set for departments, cost centers, and locations, which do not have Dynamic roles not allowed set.

To create a dynamic role

  1. Select the Organizations | <Role class> category.
  2. Select the role in the result list.
  3. Select the Create dynamic role task.
  4. Enter the required master data.
  5. Save the changes.

To edit a dynamic role

  1. Select the Organizations | <Role class> | Dynamic roles category.
  2. Select the role in the result list.
  3. Open the role's overview form.
  4. Select Dynamic roles and click on the dynamic role.
  5. Select the Change master data task.
  6. Edit the dynamic role's master data.
  7. Save the changes.
Related topics

Assign organizations

Use this task to map the relationships of a department, cost center of a location to other roles. This task has the same effect as assigning a department, cost center, or location on the role master data form. The assignment is entered in the respective foreign key column in the base table.

To assign a cost center or location to departments

  1. Select the Organizations | Cost centers or the Organizations | Locations category.
  2. Select the role in the result list.
  3. Select the Assign organizations task.
  4. Select the Departments tab.
  5. In the Add assignments pane, assign departments.

    The selected role is assigned to all departments as cost center or location.

    - OR -

    In the Remove assignments pane, remove the departments.

  6. Save the changes.

To assign a department or a location to cost centers

  1. Select the Organizations | Departments or the Organizations | Locations category.
  2. Select the role in the result list.
  3. Select the Assign organizations task.
  4. Select the Cost centers tab.
  5. In the Add assignments pane, assign cost centers.

    The selected role is assigned to all cost centers as department or location.

    - OR -

    In the Remove assignments pane, remove the cost centers.

  6. Save the changes.

To assign a department or a cost center to locations

  1. Select the Organizations | Departments or the Organizations | Cost centers category.
  2. Select the role in the result list.
  3. Select the Assign organizations task.
  4. Select the Locations tab.
  5. In the Add assignments pane, assign locations.

    The selected role is assigned to all locations as department or cost center.

    - OR -

    In the Remove assignments pane, remove the locations.

  6. Save the changes.

Specifying inheritance exclusion for roles

You can define conflicting roles to prevent employees, devices, or workdesks from being assigned to several roles at the same time and from obtaining mutually exclusive company resources through these roles. At the same time, you specify which application roles, departments, cost centers, and locations need to be mutually exclusive. This means you may not assign these roles to one and the same employee (device, workdesk).

NOTE: Only roles, which are defined directly as conflicting roles cannot be assigned to the same employee (device, workdesk). Definitions made on parent or child roles do not affect the assignment.

To configure inheritance exclusion

  • In the Designer, set the QER | Structures | ExcludeStructures configuration parameter and compile the database.

To define inheritance exclusion for a departments

  1. Select Organizations | Departments in the Manager.
  2. Select the department in the result list.
  3. Select the Edit conflicting departments task.
  4. In Add assignments, assign the departments that are mutually exclusive to the selected department.

    - OR -

    In Remove assignments, remove the assignments that are no longer mutually exclusive.

  5. Save the changes.

To define inheritance exclusion for a cost center

  1. Select Organizations | Cost centers in the Manager.
  2. Select the cost center in the result list.
  3. Select the Edit conflicting cost centers task.
  4. In Add assignments, assign the cost centers that are mutually exclusive to the selected cost center.

    - OR -

    In Remove assignments, remove the cost centers that are no longer mutually exclusive.

  5. Save the changes.

To define inheritance exclusion for a cost center

  1. Select Organizations | Locations in the Manager.
  2. Select the location in the result list.
  3. Select the Edit conflicting locations task.
  4. In Add assignments, assign the locations that are mutually exclusive to the selected location.

    - OR -

    In Remove assignments, remove the locations that are no longer mutually exclusive.

  5. Save the changes.
Detailed information about this topic
関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択