To prevent users from using individual Azure Active Directory service plans, so-called "disabled service plans" are mapped in One Identity Manager. Disabled service plans are created automatically in One Identity Manager after synchronizing Azure Active Directory subscriptions. Disabled service plans are requested through the IT Shop or assigned to users through departments, cost centers, locations, business roles, or system roles.
NOTE: An Azure Active Directory user accounts can also obtain disabled service plans through its Azure Active Directory groups. You cannot edit assignments by Azure Active Directory groups in .
Related topics
To edit disabled Azure Active Directory service plan main data
-
In the Manager, select the Azure Active Directory > Disabled service plans category.
-
Select the disabled service plan from the result list.
-
Select the Change main data task.
-
Edit the disabled service plan's main data.
-
Save the changes.
Table 39: Disabled service plan main data
Subscription |
Name of the Azure Active Directory subscription. |
Service plan |
Name of the Azure Active Directory service plan. |
IT Shop |
Specifies whether the service plan can be requested through the IT Shop. The disabled service plan can be requested by your staff though the Web Portal and granted through a defined approval process. The disabled service plan can still be assigned directly to hierarchical roles. |
Only for use in IT Shop |
Specifies whether the disabled service plan can only be requested through the IT Shop. The disabled service plan can be requested by your staff though the Web Portal and granted through a defined approval process. The disabled service plan may not be assigned directly to hierarchical roles. |
Service item |
Service item data for requesting the disabled service plan through the IT Shop. |
Category |
Categories for disabled service plan inheritance. User accounts can selectively inherit disabled Azure Active Directory service plans. To do this, disabled service plans and Azure Active Directory user accounts are divided into categories. Use this menu to allocate one or more categories to the disabled service plan. |
Related topics
Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.
For more information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.
To specify extended properties for a disabled Azure Active Directory service plan
-
In the Manager, select the Azure Active Directory > Disabled service plans category.
-
Select the disabled service plan from the result list.
-
Select Assign extended properties.
-
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.
To remove an assignment
- Save the changes.
Use this task to obtain an overview of the most important information about a disabled Azure Active Directory service plan.
To obtain an overview of a disabled Azure Active Directory service plan
-
In the Manager, select the Azure Active Directory > Disabled service plans category.
-
Select the disabled service plan from the result list.
-
Select the Disabled Azure Active Directory service plan overview task.
Related topics