サポートと今すぐチャット
サポートとのチャット

Identity Manager 9.1 - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Dynamic roles Departments, cost centers, and locations
One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations Creating and editing departments Creating and editing cost centers Creating and editing locations Setting up IT operating data for departments, cost centers, and locations Assigning employees, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded employees Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Certifying departments, cost centers, and locations Reports about departments, cost centers, and locations
Employee administration
One Identity Manager users for employee administration Basic data for employee main data Employee's central user account Employee's default email address Employee's central password Mapping multiple employee identities Password policies for employees Creating and editing employees Disabling and deleting employees Deleting all employee related data Limited access to One Identity Manager Changing the certification status of employees Assigning company resources to employees Displaying the origin of employees' roles and entitlements Analyzing role memberships and employee assignments Displaying the employees overview Displaying and deleting employees' Webauthn security keys Determining the language for employees Determining employees working hours Manually assigning user accounts to employees Entering calls for employees Assigning extended properties to employees Employee reports
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing employees Configuration parameters for managing devices and workdesks

Assigning software directly to employees

NOTE: This function is only available if the Software Management Module is installed.

You can assign software directly or indirectly to employees. Indirect assignment is carried out by allocating employees and software in company structures, like departments, cost centers, locations, or business roles. For more information about working with software, see the One Identity Manager Software Management Administration Guide.

To react quickly to special requests, you can assign software directly to an employee.

To assign software directly to an employee

  1. In the Manager, select the Employees > Employees category.

  2. Select the employee to whom the software will be assigned, from the result list.

  3. Select the Assign software task.

  4. In the Add assignments pane, assign software.

    TIP: In the Remove assignments pane, you can remove assigned software.

    To remove an assignment

    • Select the software and double-click .
  5. Save the changes.

Assigning system roles directly to employees

NOTE: This function is only available if the System Roles Module is installed.

System roles can be assigned directly or indirectly to employees. Indirect assignment is carried out by allocating the employees and system roles in company structures, such as departments, cost centers, locations, or business roles. For more information about working with system roles, see the One Identity Manager System Roles Administration Guide.

To react quickly to special requests, you can assign system roles directly to an employee.

To assign system roles directly to an employee

  1. In the Manager, select the Employees > Employees category.

  2. Select the employee in the result list.

  3. Select the Assign system roles task.

  4. In the Add assignments pane, assign system roles.

    TIP: In the Remove assignments pane, you can remove the system role assignment.

    To remove an assignment

    • Select the system role and double-click .

  5. Save the changes.

Assigning subscribable reports directly to employees

NOTE: This function is only available if the Report Subscription Module is installed.

You can assign subscribable reports directly or indirectly to employees. Indirect assignment is carried out by assigning the employee and subscribable report to company structures, like departments, cost centers, locations, or business roles. For more information about report subscriptions, see the One Identity Manager Report Subscriptions Administration Guide.

In order to react quickly to special requests, you can also assign subscribable reports directly to employees.

To assign user accounts to an employee

  1. In the Manager, select the Employees > Employees category.

  2. Select the employee in the result list.

  3. Select the Assign subscribable reports task.

  4. In the Add assignments pane, assign reports.

    TIP: In the Remove assignments pane, you can remove report assignments.

    To remove an assignment

    • Select the report and double-click .

  5. Save the changes.

Displaying the origin of employees' roles and entitlements

The Show entitlements origin report allows you to determine which entitlements an employee owns and where they come from. You can establish whether the employee obtained an entitlements directly or indirectly. For example, in the case of an indirect assignment, you can determine whether the entitlement resulted from a department memberships or a request,

You can also use the report to discover which departments, cost centers, locations, and business roles are assigned to an employee and how the membership evolved.

To use the origin report

  • In the Designer, set the SysConfig | Display | SourceDetective configuration parameter and compile the database.

    NOTE: If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.

To display the origin of an employee's entitlements

  1. In the Manager, select the Employees > Employees category.

  2. Select an employee in the result list and run the Show entitlements origin report.

  3. Under Assigned objects, you will see the employee's entitlements, departments, cost centers, locations, and business roles. Select an entry by double-clicking on it to view more details.

  4. The Origin area displays the details for the selected entry in a hierarchical structure.

    You can see whether the assignment was a direct assignment, dynamic assignment, or a request.

    • You can use the Details button to switch to the dynamic role or to the request.

    • Double-click on some of the entries in the detail view to go to the object.

    • Choose the Inspect button for further information about the assignment of authorizations.

Example: Report on an entitlement's origin

The Show entitlements origin report establishes that Jo User1 is assigned to the Active Directory "Finance" group.

The report answers several questions.

Question Why does Jo User1 have the Active Directory group?
Answer

Jo User1 owns an Active Directory user account and this user account is assigned to the "Finance" group.

Question Why is the user account assigned to the "Finance" group?
Answer

Jo User1 is assigned to the "Finance" department.

 

The "Finance" department inherits from the "Global Finance" department. The "Global Finance" department is directly assigned to the "Finance" group.

Question Why is Jo User1 in the "Finance" department?
Answer

There is a department membership request for Jo User1.

関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択