To obtain an overview of a disabled service plan
- Select the Azure Active Directory | Disabled service plans category.
- Select the service plan in the result list.
- Select the Disabled Azure Active Directory service plan overview task.
Managing Azure Active Directory environments
Setting up synchronization with an Azure Active Directory tenant
Users and permissions for synchronizing with Azure Active Directory
Integrating One Identity Manager as enterprise application in Azure Active Directory
Setting up the synchronization server
Creating a synchronization project for initial synchronization of an Azure Active Directory tenant
Displaying synchronization results
Customizing the synchronization configuration
Basic data for managing an Azure Active Directory environment
Configuring synchronization with Azure Active Directory tenants
Configuring synchronization of different Azure Active Directory tenants
Updating schemas
Post-processing outstanding objects
Configuring the provisioning of memberships
Accelerating provisioning and single object synchronization
Help for the analysis of synchronization issues
Deactivating synchronization
Account definitions for Azure Active Directory user accounts
Azure Active Directory core directories
Creating account definitions
Creating manage levels
Creating mapping rules for IT operating data
Entering IT operating data
Modify IT operating data
Assigning account definitions to employees
Password policies for Azure Active Directory user accounts
Assigning account definitions to departments, cost centers, and locations
Assigning an account definition to business roles
Assigning account definitions to all employees
Assigning account definitions directly to employees
Assigning account definitions to system roles
Adding account definitions to the IT Shop
Assigning account definitions to a target system
Deleting account definitions
Predefined password policies
Using password policies
Editing password policies
Custom scripts for password requirements
Password exclusion list
Checking passwords
Testing password generation
Initial password for new Azure Active Directory user accounts
Email notifications about login data
Target system managers
Editing a server
Azure Active Directory tenant
Azure Active Directory user accounts
General master data for Azure Active Directory tenants
Information about local Active Directory
Defining categories for the inheritance of entitlements
How to edit a synchronization project
Azure Active Directory domains
Linking user accounts to employees
Supported user account types
Azure Active Directory groups
Default user accounts
Administrative user accounts
Editing master data for Azure Active Directory user accounts
Providing administrative user accounts for one employee
Providing administrative user accounts for several employees
Privileged user accounts
General master data of Azure Active Directory user accounts
Contact data for an Azure Active Directory user account
Organizational data for an Azure Active Directory user account
Information about the local Active Directory user account
Additional tasks for managing Azure Active Directory user accounts
The Azure Active Directory user accounts overview
Changing the manage level of Azure Active Directory user accounts
Assigning Azure Active Directory groups directly to Azure Active Directory user accounts
Assigning Azure Active Directory administrator roles directly to Azure Active Directory user accounts
Assigning Azure Active Directory subscriptions directly to Azure Active Directory user accounts
Assigning disabled Azure Active Directory service plans directly to Azure Active Directory user accounts
Assigning extended properties to Azure Active Directory user accounts
Automatic assignment of employees to Azure Active Directory user accounts
Disabling Azure Active Directory user accounts
Deleting and restoring Azure Active Directory user accounts
Editing master data for Azure Active Directory groups
Azure Active Directory administrator roles
General master data for an Azure Active Directory group
Information about local Active Directory groups
Assigning Azure Active Directory groups to Azure Active Directory user accounts
Assigning Azure Active Directory groups to departments, cost centers, and locations
Assigning Azure Active Directory groups to business roles
Assigning Azure Active Directory user accounts directly to Azure Active Directory groups
Adding Azure Active Directory groups to system roles
Adding Azure Active Directory groups to the IT Shop
Additional tasks for managing Azure Active Directory groups
The Azure Active Directory group overview
Adding Azure Active Directory groups to Azure Active Directory groups
Effectiveness of group memberships
Azure Active Directory group inheritance based on categories
Assigning owners to Azure Active Directory groups
Assigning extended properties to Azure Active Directory groups
Deleting Azure Active Directory groups
Editing master data of Azure Active Directory administrator roles
Assigning Azure Active Directory administrator roles to Azure Active Directory user accounts
Azure Active Directory subscriptions and service plans
Assigning Azure Active Directory administrator roles to departments, cost centers, and locations
Assigning Azure Active Directory administrator roles to business roles
Assigning Azure Active Directory user accounts directly to Azure Active Directory administrator roles
Adding Azure Active Directory administrator roles to system roles
Adding Azure Active Directory administrator roles in the IT Shop
Additional tasks for managing Azure Active Directory administrator roles
Azure Active Directory subscriptions
Reports about Azure Active Directory objects
Configuration parameters for managing an Azure Active Directory environment
Default project template for Azure Active Directory
Editing Azure Active Directory subscription master data
Assigning Azure Active Directory subscriptions to Azure Active Directory user accounts
Disabled Azure Active Directory service plans
Assigning Azure Active Directory subscriptions to departments, cost centers, and locations
Assigning Azure Active Directory subscriptions to business roles
Assigning Azure Active Directory user accounts directly to an Azure Active Directory subscription
Adding Azure Active Directory subscriptions to system roles
Adding Azure Active Directory subscriptions to the IT Shop
Additional tasks for managing Azure Active Directory subscriptions
Editing master data of disabled Azure Active Directory service plans
Assigning disabled Azure Active Directory service plans to Azure Active Directory user accounts
Assigning disabled Azure Active Directory service plans directly to departments, cost centers, and locations
Assigning disabled Azure Active Directory service plans to business roles
Assigning Azure Active Directory user accounts directly to Azure Active Directory service plans
Adding disabled Azure Active Directory service plans to system roles
Adding disabled Azure Active Directory service plans to the IT Shop
Additional tasks for managing disabled Azure Active Directory service plans
The disabled Azure Active Directory service plans overview
Effectiveness of assignments of disabled service plans
The procedure described under Effectiveness of group memberships can also be used for disabled service plans. The effect of the assignments is mapped in the AADUserHasDeneiedService and AADBaseTreeHasDeniedService tables through the XIsInEffect column.
Prerequisites
- The QER | Structures | Inherite | GroupExclusion configuration parameter is set.
- Mutually exclusive groups belong to the same tenant.
To exclude subscriptions
- Select the Azure Active Directory | Disabled service plans category.
- Select the disabled service plan from the result list.
- Select the Exclude disabled service plans task.
- In the Add assignments pane, assign the disabled service plans that are excluded with the selected service plan.
- OR -
In the Remove assignments pane, delete the disabled service plans that no longer exclude each other.
- Save the changes.
Inheritance of disabled Azure Active Directory service plans based on categories
The procedure described under Azure Active Directory group inheritance based on categories can also be used for disabled service plans.
To use inheritance through categories
- Define the categories in the tenant.
- Assign categories to user accounts through their master data.
- Assign categories to disabled service plans through their master data.
Related topics
Assigning extended properties to disabled Azure Active Directory service plans
Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.
To specify extended properties for a disabled service plan
- Select the Azure Active Directory | Disabled service plans category.
- Select the service plan in the result list.
- Select the Assign extended properties task.
-
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.
To remove an assignment
- Select the extended property and double-click
.
- Select the extended property and double-click
- Save the changes.
For detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.