Identity Manager 9.0 LTS - Administration Guide for Connecting to Native Databases through Database Systems Integration Module

Provisioning workflow for database-level objects

The Provisioning workflow for database-level objects is used to create, update, delete MS SQL users, and update database-role membership.

Creating a Microsoft SQL user

You can create SQL USER WITHOUT LOGIN, SQL USER WITH LOGIN, WINDOWS USER, WINDOWS GROUP, and SQL USER WITH PASSWORD types of users in MS SQL Server.

1. Open the Manager.
2. Navigate to Custom target systems | <required target system root> | User accounts. To view the target system name, expand the required target system root.
3. Click Add.
4. Provide the relevant information for the new user.

   IMPORTANT:

   • For WINDOWS LOGIN and WINDOWS GROUP, the user name must be in the <domain\username> format.
   • The Login name for the user must be unique.

5. Provide a password in the Password text field. Entering a password is applicable only for SQL USER WITH LOGIN and SQL USER WITH PASSWORD users. If not provided, the value from the DefaultUserPassword variable is used.NOTE: For SQL USER WITH LOGIN, the password text field is used only for login creation.

   NOTE: For SQL USER WITH LOGIN, the password text field is used only for login creation.

6. Select one of the following options, SQL USER WITHOUT LOGIN, SQL USER WITH LOGIN, WINDOWS USER, WINDOWS GROUP, or SQL USER WITH PASSWORD from the AccountType drop-down list to proceed with the process.
7. Click Save.

   A MS SQL user is created successfully.

The following topic briefs about the procedure to change password, lock user, unlock users, and change role membership.

To change the password:

1. Open the Manager.
2. Navigate to Custom target systems | <required target system root> | User accounts.
3. In Custom target system, select the user to be updated.
4. Provide the new password in the Password text field.
5. Click Save.

   The password is updated.

To lock or unlock users:

1. Open the Manager.
2. Navigate to Custom target systems | <required target system root> | User accounts.
3. In Custom target systems, select the user to be updated.
4. Select the User account is disabled check box to lock or unlock the user.

   The user is locked or unlocked based on the action.

To change role membership:

1. Open the Manager.
2. Navigate to Custom target systems | <required target system root> | User accounts.
3. In Custom target system, select the user to be updated.
4. From the Assign Groups section, add or remove groups to update the role membership.

   The role membership is updated.

Deleting a Microsoft SQL user

The following procedure describes how to delete an SQL user.

To delete a MS SQL user

1. Open the Manager.
2. Navigate to Custom target systems | <required target system root> | User accounts.
3. In Custom target systems, select the user and click Delete.

The user account is disabled immediately on the MS SQL database based on deferred deletion value of the UNSAccountB table in One Identity Manager.