One Identity Manager provides various system users whose permissions are matched to the various tasks. Create your own system users if required. Add the system users to permissions groups, thereby granting the system users permissions for the tables and columns of the One Identity Manager schema and make the user interface available.
The system user's effective permissions that are found are not saved in the One Identity Manager schema, but are determined when logging into One Identity Manager tools and then they are loaded.
When installing the One Identity Manager database using the , create an administrative system user that is added to non role-based permissions groups and receives all the permissions of the viadmin default system user.
In the Designer, system users are displayed in the Permissions > System users category. This shows you an overview of the permissions groups that are assigned to each individual system user. Use the Designer to create and edit your system user in the User & Permissions Group Editor.
You can run the following tasks:
-
Create new system users, such as an administrative system users or system users for service accounts
-
Configure password settings for system users
-
Add system users to permission groups
-
Determine which employees use a system user
Related topics
NOTE: You can create an administrative system user in User & Permissions Group Editor using the Create administrator menu. Administrative system users are automatically added to all non role-based permissions groups.
To create a new system user
-
In the Designer, select the Permissions category.
-
Start the User & Permissions Group Editor with the Show / edit permissions group task.
-
Add a new system user using the User > New menu item.
-
Edit the system user's main data.
-
Add the system user to permissions groups.
-
Select the Database > Save to database and click Save.
Related topics
The password policy is used for logging in to with a system user. This password policy defined the settings for the system user passwords (DialogUser.Password and Person.DialogUserPassword) as well as the passcode for a one time log in on the Web Portal (Person.Passcode).
If necessary, adjust the password policy to your requirements in the Designer. For detailed information about editing password policies, see One Identity Manager Operational Guide.
NOTE: The password policy is marked as the default policy. This password policy is applied if no other password policy can be found for employees, user accounts or system users.
To prevent passwords expiring for service accounts, for example, in the Designer, you can enable the Password never expires (DialogUser.PasswordNeverExpires) option for the respective system users.
Related topics
