Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.
For more information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.
To specify extended properties for a user account
-
In the Manager, select the SharePoint Online > User accounts (user authenticated) category.
- OR -
In the Manager, select the SharePoint Online > User accounts (group authenticated) category.
-
Select the user account in the result list.
-
Select Assign extended properties.
-
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.
To remove an assignment
- Save the changes.
NOTE: As long as an account definition for an identity is valid, the identity retains the user account that was created by it. If the account definition assignment is removed, the user account that was created from this account definition, is deleted. User accounts marked as Outstanding are only deleted if the QER | Person | User | DeleteOptions | DeleteOutstanding configuration parameter is set.
In the Manager, you can delete a user account that was not created using an account definition in the result list or from the menu bar. After you have confirmed the security alert the user account is marked for deletion in the One Identity Manager. The user account is locked in One Identity Manager and permanently deleted from the One Identity Manager database and the target system depending on the deferred deletion setting.
For more information about deactivating and deleting identities and user accounts, see the One Identity Manager Target System Base Module Administration Guide.
To delete a user account that is not managed using an account definition
-
In the Manager, select the SharePoint Online > User accounts (user authenticated) category.
- OR -
In the Manager, select the SharePoint Online > User accounts (group authenticated) category.
-
Select the user account in the result list.
- Click
in the result list.
- Confirm the security prompt with Yes.
To restore a user account
-
In the Manager, select the SharePoint Online > User accounts (user authenticated) category.
- OR -
In the Manager, select the SharePoint Online > User accounts (group authenticated) category.
-
Select the user account in the result list.
-
Click 
in the result list.
Related topics
You can use groups in SharePoint Online to provide users with the same permissions. Groups that you add for site collections are valid for all sites in that site collection. SharePoint Online roles that you define for a site are assigned directly to groups. All user accounts that are members of these groups obtain the permissions defined in the SharePoint Online roles for this site. To add users to groups, you assign the groups directly to users. You can assign groups to departments, cost centers, locations, business roles, system roles, or the IT Shop.
You can edit the following group data in the One Identity Manager:
-
Object properties like display name, owner, or visibility of memberships
-
Assigned SharePoint Online role and user accounts
-
Usage in the IT Shop
-
Risk assessment
-
Inheritance through roles and inheritance restrictions
Related topics
.
in the result list.