지금 지원 담당자와 채팅
지원 담당자와 채팅

Identity Manager 8.2 - Authorization and Authentication Guide

About this guide One Identity Manager application roles Granting One Identity Manager schema permissions through permissions groups Managing permissions to program features One Identity Manager authentication modules OAuth 2.0 / OpenID Connect configuration Multi-factor authentication in One Identity Manager Authenticating other applications using OAuth 2.0/OpenID Connect Granular permissions for the SQL Server and database Installing One Identity Redistributable STS Program functions for starting the One Identity Manager tools Minimum access levels of One Identity Manager tools

Assigning subscribable reports to application roles

Use this task to assign subscribable reports to an application role. All employee in this application role can subscribe to reports in the Web Portal. For more information about subscribable reports, see the One Identity Manager Report Subscriptions Administration Guide.

NOTE:

  • This function is only available if the Report Subscription Module is installed.

  • The task is only available if a permissions group is assigned to the application role (or a parent application role).

  • Subscribable reports cannot be assigned to the Base roles | Employee Managers, the Base roles | Everyone (Lookup), or the Base roles | Everyone (Change) application role.

To assign subscribable reports to an application role

  1. In the Manager, select an application role in the One Identity Manager Administration category.

  2. Select the Assign subscribable reports task.

  3. In the Add assignments pane, assign reports.

    TIP: In the Remove assignments pane, you can remove report assignments.

    To remove an assignment

    • Select the report and double-click .

  4. Save the changes.

Assigning extended properties to application roles

Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager. For detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

To specify extended properties for an application role

  1. In the Manager, in the One Identity Manager Administration category, select the Application role.

  2. Select the Assign extended properties task.

  3. In the Add assignments pane, assign extended properties.

    TIP: In the Remove assignments pane, you can remove assigned extended properties.

    To remove an assignment

    • Select the extended property and double-click .

  4. Save the changes.

Generating assignment resources for application roles

It is possible to create assignment resources for individual application roles. This means you can limit assignment resources to individual application roles in the Web Portal. When the assignment resource is requested, it is no longer necessary to select the application role as well. The application role is automatically a part of the assignment request. For detailed information about assignment requests, see the One Identity Manager IT Shop Administration Guide.

To limit an assignment resource to one application role

  1. In the Manager in the One Identity Manager Administration category, select the Application role.

  2. Select the Create assignment resource task.

    This starts a wizard that takes you through the steps for adding an assignment resource.

Reports about application roles

One Identity Manager makes various reports available containing information about the selected base object and its relations to other One Identity Manager database objects. The following reports are available for application roles.

Table 17: Reports about application roles
Report Description

Overview of all assignments

This report identifies all departments, cost centers, locations, business roles or IT Shop structures in which employees from the selected application role are also members. For detailed information about analyzing role memberships, see the One Identity Manager Identity Management Base Module Administration Guide.

Show historical memberships

This report lists all members of the selected application role and the length of their membership.

관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택