You can assign company resources to employees, devices, and workdesks in the One Identity Manager. You can use different assignments types to assign company resources.
Assignments types are:
Basics for mapping company structures in One Identity Manager
Hierarchical role structure basic principles
Basic principles for assigning company resources
Dynamic roles
Direct company resource assignments
Indirect company resource assignments
Assigning company resources through dynamic roles
Assigning company resources through IT Shop requests
Basics of calculating inheritance
Preparing hierarchical roles for company resource assignments
Possible assignments of company resources through roles
Permitting assignments of employees, devices, workdesks, and company resources to roles
Blocking inheritance using roles
Preventing employees, devices, or workdesks from inheriting individual roles
Preventing inheritance to individual employees, devices, or workdesks
Inheritance exclusion: Specifying conflicting roles
Creating and editing dynamic roles
Tips about conditions for dynamic roles
Testing dynamic role conditions
Calculating role memberships for dynamic roles
Departments, cost centers, and locations
Schedules for calculating dynamic roles
Excluding employees from dynamic roles
Displaying the dynamic role overview
Main data for dynamic roles
Creating and editing dynamic role schedules
Starting dynamic role schedules immediately
Assigning dynamic roles to schedules
Calculating dynamic roles immediately if objects change
Calculating role memberships for dynamic roles immediately
Excluding dynamic roles from recalculation
One Identity Manager users for managing departments, cost centers, and locations
Basic information for departments, cost centers, and locations
Employee administration
Role classes for departments, cost centers, and locations
Role types for departments, cost centers, and locations
Creating and editing departments
Creating role types for departments, cost centers, and locations
Assigning role classes to role types for departments, cost centers, and locations
Functional areas for departments, cost centers, and locations
Attestors for departments, cost centers, and locations
Approvers and approvers (IT) for departments, cost centers, and locations
General main data for departments
Contact data for departments
Functional area and risk assessment for departments
Creating and editing cost centers
Creating and editing locations
General main data for locations
Location address information
Configuring location networks
Directions to location
Functional area and risk assessment for locations
Setting up IT operating data for departments, cost centers, and locations
Assigning employees, devices, and workdesks to departments, cost centers, and locations
Assigning company resources to departments, cost centers, and locations
Creating dynamic roles for departments, cost centers, and locations
Dynamic roles with incorrectly excluded employees
Assign organizations
Specifying inheritance exclusion for departments, cost centers, and locations
Assigning extended properties to departments, cost centers, and locations
Reports about departments, cost centers, and locations
One Identity Manager users for employee administration
Basic data for employee main data
Managing devices and workdesks
Creating and editing business partners for external employees
Mail templates for notifications about employees
Employee's central user account
Employee's default email address
Employee's central password
Mapping multiple employee identities
Password policies for employees
Predefined password policies
Applying employee password policies
Changing the password policy for password columns
Assigning password policies to departments, cost centers, locations, and business roles
Editing password policies for employees
Creating password policies for employees
General main data for password policies
Password policy settings
Character classes for passwords
Custom scripts for password requirements
Defining the excluded list for passwords
Checking employee passwords
Generating passwords for testing employees
Informing employees about expiring passwords
Displaying locked employees and system users
Creating and editing employees
General employee main data
Organizational employee main data
Address data for employees
Miscellaneous employee main data
Disabling and deleting employees
Temporarily deactivating employees
Permanently deactivating employees
Reactivate permanently deactivated employees
Deferred deletion of employees
Deleting all employee related data
Limited access to One Identity Manager
Changing the certification status of employees
Assigning company resources to employees
Assigning employees to departments, cost centers, and locations
Assigning employees to business roles
Adding employees to IT Shop custom nodes
Assigning application roles to employees
Assigning resources directly to employees
Assigning software directly to employees
Assigning system roles directly to employees
Assigning subscribable reports directly to employees
Displaying the origin of employees' roles and entitlements
Analyzing role memberships and employee assignments
Displaying the employees overview
Displaying and deleting employees' Webauthn security keys
Determining the language for employees
Determining employees working hours
Manually assigning user accounts to employees
Entering calls for employees
Assigning extended properties to employees
Employee reports
Basic data for device admin
Managing resources
Creating and editing device models
Creating and editing business partners
Creating and editing device statuses
Creating and editing workdesk statuses
Creating and editing workdesk types
Creating and editing devices
Assigning company resources to devices
Displaying the device overview
Entering service agreements and calls for devices
Creating and editing workdesks
General main data of workdesks
Location information for workdesks
Additional information for workdesks
Assigning company resources to workdesks
Assigning workdesks to departments, cost centers, and locations
Assigning workdesks to business roles
Assigning software directly to workdesks
Assigning system roles directly to workdesks
Displaying the workdesk overview
Assigning devices to workdesks
Assigning workdesks to employees
Entering calls for workdesks
Asset data for devices
One Identity Manager users for managing resources
Basic data for resources
Creating and editing resources
Main data for resources
Assigning resources to employees
Setting up extended properties
Assigning resources to departments, cost centers, and locations
Assigning resources to business roles
Assigning resources directly to employees
Adding resources to the IT Shop
Adding resources in system roles
Displaying the resources overview
Assigning extended properties to resources
Creating and editing multi-request resources
Assigning multi-request resources to employees
Adding multi-request resources to the IT Shop
Displaying the multi-request resource overview
Reports about resources
One Identity Manager users for managing extended properties
Creating property groups for extended properties
Creating and editing extended properties
Main data for extended properties
Assigning extended properties to property groups
Assigning additional property groups to extended properties
Specifying scope limits for extended properties
Displaying the extended properties overview
Assigning objects to extended properties
Configuration parameters for managing departments, cost centers, and locations
Configuration parameters for managing employees
Configuration parameters for managing devices and workdesks
Basic principles for assigning company resources
Direct company resource assignments
Direct assignment of company resources results from the assignment of a company resource to an employee, device, or workdesk, for example. Direct assignment of company resources makes it easier to react to special requirements.
Figure 5: Schema of a direct assignment based on the example of an employee
Indirect company resource assignments
In the case of indirect assignment of company resources, employees, devices, and workdesks are arranged in departments, cost centers, locations, business roles, or application roles. The total of assigned company resources for an employee, device, or workdesk is calculated from the position within the hierarchies, the direction of inheritance (top-down or bottom-up) and the company resources assigned to these roles. In the Indirect assignment methods a difference between primary and secondary assignment is taken into account.
Figure 6: Schema of an indirect assignment based on the employee example
Related topics
Secondary assignment
You make a secondary assignment by classifying an employee, a device, or a workdesk within a role hierarchy. Secondary assignment is the default method for assigning and inheriting company resources through roles. In the role classes
Figure 7: Secondary assignment inheritance schema
