SharePoint site collections and sites
SharePoint sites are organized into site collections. A site collection manages access rights and characterization templates for all sites in the site collection. It consists of at least one site on the top level (root site). Other websites are arranged below this root site. They can be connected to hierarchies through simple task relationships. Properties (for example role definitions) can be inherited by child sites though this hierarchical structure.
Site collections and sites are mapped with their access rights to One Identity Manager. You cannot edit their properties in the One Identity Manager. You can edit access rights managed within a site collection in One Identity Manager. To do this, SharePoint roles, groups, and user accounts are loaded into the One Identity Manager database.
Related topics
SharePoint site collections
A site collection groups sites together. User account and their access permissions are managed on the sites. To automatically assign used accounts and identities, assign an account definition to the site collection.
Authorized user accounts and groups are displayed on the site collection's overview as well as the web application and the root site linked to the site collection. The quota template, the site collection administrators and auditors assigned to the site collection are also visible on the overview form.
To edit site collection properties
- Select the SharePoint > Site collections category.
- Select the site collection in the result list. Select the Change main data task.
- Enter the required data on the main data form.
- Save the changes.
Detailed information about this topic
General main data of a site collection
The following properties are displayed for site collections.
Table 15: General main data of a site collection
| Account definition |
Initial account definition for creating user accounts. This account definition is used if automatic assignment of identities to user accounts is used for this site collection and if user accounts are to be created that are already managed (Linked configured). The account definition's default manage level is applied.
User accounts are only linked to the identity (Linked) if no account definition is given. This is the case on initial synchronization, for example. |
| Server |
Name of the SharePoint server that provides the site collection. |
| Web application |
Unique ID for web application that belongs to the site collection. |
| Root site |
Link to the site collection root site. Links to a site that is set as root site. |
| Administrator |
Administrator user account for the site collection. |
| Other administrator |
Additional administrator user account for the site collection. |
| Used storage |
Information about the storage taken up by the site collection on the server. |
| Last security-related change |
Time of last security-related change that was made to an object in this site collection. |
On the Addresses tab, you can see the site collection URL and port and the URL of a portal linked to the site collection.
Related topics
Specifying categories for inheriting SharePoint groups
In One Identity Manager, user accounts can selectively inherit groups. To do this, groups and user accounts are divided into categories. The categories can be freely selected and are specified using a mapping rule. Each category is given a specific position within the template. The template contains two tables; the user account table and the group table. Use the user account table to specify categories for target system dependent user accounts. In the group table, enter your categories for the target system-dependent groups. Each table contains the category positions position 1 to position 63.
To define a category
-
In the Manager, select the site collection in the SharePoint > Site collections category.
-
Select the Change main data task.
-
Switch to the Mapping rule category tab.
-
Extend the relevant roots of the user account table or group table.
-
To enable the category, double-click 
.
-
Enter a category name of your choice for user accounts and groups in the login language that you use.
- Save the changes.
Detailed information about this topic
