サポートと今すぐチャット
サポートとのチャット

Identity Manager 9.0 LTS - Administration Guide for Connecting to Custom Target Systems

Managing custom target systems Setting up scripted data provisioning in a custom target system Managing user accounts and employees Managing assignments of groups and system entitlements Login information for user accounts Mapping custom target system objects in One Identity Manager Treatment of custom target system objects in the Web Portal Basic configuration data for custom target systems Configuration parameters for managing custom target systems

Main data for groups

Enter the following main data of a group.

Table 27: Entering main data of a group

Property

Description

Name

Name of the group.

Canonical name

The canonical name is generated automatically and should not be changed.

Group type

Detailed name of the group type.

Distinguished name

The distinguished name is determined using a template and must not be changed.

Object GUID

Unique ID used for managing the object in the target system.

Display name

Name for displaying the group in the user interface of One Identity Manager tools.

Target system

Name of the target system.

Container

Container in which to create the group.

Service item

Service item data for requesting the group through the IT Shop.

Risk index

Value for evaluating the risk of assigning the group to user accounts. Set a value in the range 0 to 1. This input field is only visible if the QER | CalculateRiskIndex configuration parameter is activated.

For more information about risk assessment, see the One Identity Manager Risk Assessment Administration Guide.

Category

Categories for group inheritance. Groups can be selectively inherited by user accounts. To do this, groups and user accounts are divided into categories. Select one or more categories from the menu.

Description

Text field for additional explanation.

IT Shop

Specifies whether the group can be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. The group can still be assigned directly to hierarchical roles.

Only for use in IT Shop

Specifies whether the group can only be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. Direct assignment of the group to hierarchical roles or user accounts is not permitted.

Read-only memberships

Specifies whether memberships are read-only. For example, dynamic groups. The memberships are regulated by the target system. Manual changes to memberships in One Identity Manager are not permitted.

Related topics

Assigning groups to groups

Use this task to add a group to another group. This means that the groups can be hierarchically structured. Only groups from the same target system can be assigned.

To assign groups directly to a group as members

  1. In the Manager, select the Custom Target Systems > <target system> > Groups category.

  2. Select the group in the result list.

  3. Select the Assign groups category.

  4. Select the Has members tab.

  5. Assign child groups in Add assignments.

    TIP: In the Remove assignments pane, you can remove the assignment of groups.

    To remove an assignment

    • Select the group and double-click .

  6. Save the changes.

To add a group as a member of other groups

  1. In the Manager, select the Custom Target Systems > <target system> > Groups category.

  2. Select the group in the result list.

  3. Select the Assign groups task.

  4. Select the Is member of tab.

  5. In the Add assignments pane, assign parent groups.

    TIP: In the Remove assignments pane, you can remove the assignment of groups.

    To remove an assignment

    • Select the group and double-click .

  6. Save the changes.
Related topics

Assigning extended properties to groups

Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.

For more information about setting up extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

To specify extended properties for a group

  1. In the Manager, select the Custom Target Systems > <target system> > Groups category.

  2. Select the group in the result list.

  3. Select Assign extended properties.

  4. In the Add assignments pane, assign extended properties.

    TIP: In the Remove assignments pane, you can remove assigned extended properties.

    To remove an assignment

    • Select the extended property and double-click .

  5. Save the changes.
Related topics

Assigning permissions controls to groups

Use this task to assign multiple permissions controls to a group.

To assign permissions controls to a group

  1. In the Manager, select the Custom Target Systems > <target system> > Groups category.

  2. Select the group in the result list.

  3. Select the Assign permissions controls task.

  4. In the Add assignments pane, assign permissions controls.

    TIP: In the Remove Assignments pane, you can remove the assigned permission controls.

    To remove an assignment

    • Select the permissions control and double-click .

  5. Save the changes.
Related topics
関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択