サポートと今すぐチャット

オンラインヘルプの参照
登録の完了

サインイン

価格設定をリクエスト

営業担当に連絡

Identity Manager 9.0 LTS - Administration Guide for Connecting to Custom Target Systems

コンテンツのナビゲーション

Managing custom target systems

One Identity Manager users for managing custom target systems Configuration parameters for managing custom target systems

Setting up scripted data provisioning in a custom target system

Creating the scripts for data provisioning in a custom target system Job server for provisioning data in a custom target system

General main data of Job servers Specifying server functions

Post-processing outstanding objects

Adding custom tables to the target system synchronization Post-processing outstanding objects

Managing user accounts and employees

Account definitions for user accounts

Creating account definitions Editing account definitions Main data for account definitions Editing manage levels Creating manage levels Assigning manage levels to account definitions Main data for manage levels Creating mapping rules for IT operating data Entering IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions in the IT Shop

Assigning account definitions to custom target systems Deleting account definitions

Assigning employees automatically to user accounts

Editing search criteria for automatic employee assignment Finding employees and directly assigning them to user accounts Changing manage levels for user accounts Assigning account definitions to linked user accounts

Supported user account types

Default user accounts Administrative user accounts

Providing administrative user accounts for one employee Providing administrative user accounts for several employees

Privileged user accounts

Setting deferred deletion for custom target system user accounts

Managing assignments of groups and system entitlements

Specifying types of system entitlements in use Assigning groups and system entitlements to user accounts in One Identity Manager

Prerequisites for indirect assignments of groups and system entitlements to user accounts Assigning groups to departments, cost centers, and locations Assigning system entitlements to departments, cost centers, and locations Assigning groups to business roles Assigning system entitlements to business roles Adding groups to system roles Adding system entitlements to system roles Adding groups to the IT Shop Adding system entitlements to the IT Shop Assigning user accounts directly to a group Assigning user accounts directly to a system entitlement Assigning groups directly to user accounts Assigning system entitlements directly to a user account

Effectiveness of memberships in groups and system entitlements Inheriting groups and system entitlements based on categories Overview of all assignments

Login information for user accounts

Password policies for user accounts

Predefined password policies Using password policies Editing password policies Creating password policies General main data of password policies Policy settings Character classes for passwords Custom scripts for password requirements

Checking passwords with a script Generating passwords with a script

Editing the password excluded list Verifying passwords Testing password generation

Initial password for new user accounts Email notifications about login data

Mapping custom target system objects in One Identity Manager

Custom target system identifiers

General main data for custom target systems Customizing data synchronization for custom target systems Defining categories for inheriting groups and system entitlements Specifying alternative column names

Container structures in custom target systems

Main data for containers

User accounts in custom target systems

Creating and editing user accounts User account main data Assigning extended properties to user accounts Assigning permissions controls to user accounts Disabling user accounts Deleting and restoring user accounts Displaying the user account overview

Groups in custom target systems

Main data for groups Assigning groups to groups Assigning extended properties to groups Assigning permissions controls to groups Displaying the group overview

System entitlements in custom target systems

System entitlement main data Assigning system entitlements to system entitlements Assigning extended properties to system entitlements Displaying system entitlement overviews

Permissions controls in custom target systems

Main data for permissions controls Assigning user accounts to permissions controls Assigning groups to permissions controls Displaying the permissions control overview

Reports about custom target systems

Treatment of custom target system objects in the Web Portal Basic configuration data for custom target systems

Target system managers Target system types for custom target systems Configuring display of custom schema extensions for custom target systems

Configuration parameters for managing custom target systems

Main data for groups

Enter the following main data of a group.

Table 27: Entering main data of a group
Property	Description
Name	Name of the group.
Canonical name	The canonical name is generated automatically and should not be changed.
Group type	Detailed name of the group type.
Distinguished name	The distinguished name is determined using a template and must not be changed.
Object GUID	Unique ID used for managing the object in the target system.
Display name	Name for displaying the group in the user interface of One Identity Manager tools.
Target system	Name of the target system.
Container	Container in which to create the group.
Service item	Service item data for requesting the group through the IT Shop.
Risk index	Value for evaluating the risk of assigning the group to user accounts. Set a value in the range 0 to 1. This input field is only visible if the QER \| CalculateRiskIndex configuration parameter is activated. For more information about risk assessment, see the One Identity Manager Risk Assessment Administration Guide.
Category	Categories for group inheritance. Groups can be selectively inherited by user accounts. To do this, groups and user accounts are divided into categories. Select one or more categories from the menu.
Description	Text field for additional explanation.
IT Shop	Specifies whether the group can be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. The group can still be assigned directly to hierarchical roles.
Only for use in IT Shop	Specifies whether the group can only be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. Direct assignment of the group to hierarchical roles or user accounts is not permitted.
Read-only memberships	Specifies whether memberships are read-only. For example, dynamic groups. The memberships are regulated by the target system. Manual changes to memberships in One Identity Manager are not permitted.

Related topics

Assigning groups to groups

Use this task to add a group to another group. This means that the groups can be hierarchically structured. Only groups from the same target system can be assigned.

To assign groups directly to a group as members

In the Manager, select the Custom Target Systems > <target system> > Groups category.
Select the group in the result list.
Select the Assign groups category.
Select the Has members tab.
Assign child groups in Add assignments.
TIP: In the Remove assignments pane, you can remove the assignment of groups.

To remove an assignment
- Select the group and double-click .
Save the changes.

To add a group as a member of other groups

In the Manager, select the Custom Target Systems > <target system> > Groups category.
Select the group in the result list.
Select the Assign groups task.
Select the Is member of tab.
In the Add assignments pane, assign parent groups.
TIP: In the Remove assignments pane, you can remove the assignment of groups.

To remove an assignment
- Select the group and double-click .
Save the changes.

Related topics

Assigning system entitlements to system entitlements

Assigning extended properties to groups

Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.

For more information about setting up extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

To specify extended properties for a group

In the Manager, select the Custom Target Systems > <target system> > Groups category.
Select the group in the result list.
Select Assign extended properties.
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.

To remove an assignment
- Select the extended property and double-click .
Save the changes.

Related topics

Assigning extended properties to system entitlements

Assigning permissions controls to groups

Use this task to assign multiple permissions controls to a group.

To assign permissions controls to a group

In the Manager, select the Custom Target Systems > <target system> > Groups category.
Select the group in the result list.
Select the Assign permissions controls task.
In the Add assignments pane, assign permissions controls.
TIP: In the Remove Assignments pane, you can remove the assigned permission controls.

To remove an assignment
- Select the permissions control and double-click .
Save the changes.

Related topics

Assigning groups to permissions controls

関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択

© 2024 One Identity LLC. ALL RIGHTS RESERVED. 利用規約プライバシー Cookie Preference Center