To be able to request system entitlements as products, they are assigned to corresponding service items. Then you can assign these service items to a
To be able to request system entitlements as products, they are assigned to corresponding service items. Then you can assign these service items to a
You can edit the main data of service items.
To display and edit a service items role's main data
Open the home page.
On the Home page, in the My Responsibilities tile, click System entitlements.
On the System Entitlements page, click the system entitlement whose service item you want to edit.
In the Edit System Entitlement pane, click the Service Item tab.
On the Service Item tab, edit the service item's main data.
Property |
Description |
---|---|
Service item |
Enter a name for the service item. |
Description |
Enter a description of the service item. |
Service category |
You can group different service items into service categories. To do this, click Assign/Change and select the service category to which you want to assign the service item. |
Approval policy |
Select the approval policy used to determine the approver when the service item is requested in the Web Portal. |
Approval by multi-factor authentication |
Select this check box to specify that approvals of requests for this service item require multi-factor authentication. |
Max. days valid |
Specify how long an identity can keep the product until it is automatically unsubscribed again. An identity keeps their requested products on the shelf until they unsubscribe from them themselves. Sometimes, however, products are only required for a certain length of time and can be canceled automatically after this time. Products that are intended to have a limited shelf life need to be marked with a validity period. |
Website |
Specify the URL of a web page that contains more information about the product. Use the following format: https://www.example.com or http://www.example.com. This field allows you to link product descriptions in the internet or intranet to the service item. |
Sort order |
Specify how the service category is sorted. |
Request property |
Select the request property using the additional request parameters that are defined for a request. If you do not select any request properties, the request properties of the associated service category are used. Requests can be given additional information though product-specific request properties such as the specific details of a product, its size, or color. A request property gathers all additional features together that can be given when requesting a product. |
Functional area |
Click Assign/Change and then select the functional area to which you want to assign the service item. You can use One Identity Manager to assess the risk of assignments. The assessments can be evaluated separately by functional area. To do this, service items must be assigned to functional areas. |
Attestors |
Click Assign/Change and then select an application role. Members of this application role can approve attestation cases that affect the service item. |
Terms of use |
Select the terms of use that the product's requester must accept. |
Picture |
Enter a picture for the service item. Users see this picture when they make a request. Perform the following actions as well:
|
Request parameters must be defined per recipient |
Select the check box to enter additional request properties separately for each recipient of this product, if the product is requested for different recipients in one request procedure. |
Retain service item assignment on relocation |
Select the check box if requests for this service item are retained when a customer or the product is moved. If an identity requests a product from a |
Tags |
Enter tags for the product. These tags can be used as search criteria by requests in the Web Portal. |
Not requestable/Requestable |
Set the switch to Requestable if you want to request system entitlements through the Web Portal. Set the switch to Not requestable if you do not want to request system entitlements through the Web Portal. For more information, see Making system entitlements requestable. |
Product owner |
Product owners can edit service item's main data and, be included in approval procedures as approvers for requests of this service item. Specify which identities are responsible for the service item.
|
Click Save.
As soon as a system entitlement has been assigned to an identity using a corresponding user account, the identity becomes a member in the system entitlement.
You can display identities that are assigned system entitlements for which you are responsible.
To display identities that are assigned a system entitlement
Open the home page.
On the Home page, in the My Responsibilities tile, click System entitlements.
On the System Entitlements page, click the system entitlement whose memberships you want to display.
In the Edit System Entitlement pane, click the Memberships tab.
(Optional) To display all memberships that were created directly in the selected system entitlement, click Direct memberships.
(Optional) To display all memberships created by inheritance from child system entitlements, click Inherited memberships.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. 利用規約 プライバシー Cookie Preference Center