Assign EMPTemplate to Business roles so that the EMPTemplate can be assigned to Epic User through these business roles.
To assign a EMPTemplate to a business role (non role-based login)
- In the One Identity Manager, select the Epic Healthcare | EMPTemplates category.
- Select the EMPTemplates in the result list.
- Select the Assign business roles task.
- Assign business roles in Add assignments.
NOTE:
- You can remove the assignment of business roles in Remove assignments.
- To remove an assignment, select the business role and double-click .
- Save the changes.
To assign EMPTemplate to a business role (role-based login)
- In One Identity Manager, , select the Business roles category.
- Select the business role in the result list.
- Select the Assign Epic EMP Templates task.
- Assign EMPTemplates in Add assignments.
NOTE:
- You can remove the assignment of EMPTemplate in Remove assignments.
- To remove an assignment, select the EMPTemplate and double-click .
- Save the changes.
When you assign an EMPTemplate to a IT Shop shelf, it can be requested by the shop customers.
Prerequisites
To ensure that an EMPTemplate can be requested, the following prerequisites are required
- The EMPTemplate must be marked with the IT Shop option.
- The EMPTemplate must be assigned a service item.
NOTE: In the web portal, all products that can be requested are grouped together by service category. To make the EMPTemplate easier to find in the web portal, assign a service category to the service item.
- If you only want it to be possible for the EMPTemplate to be assigned to employees through IT Shop requests, the EMPTemplate must also be labelled with the Use only in IT Shop option. Direct assignment to hierarchical roles or user accounts is no longer permitted.
NOTE: With role-based login, the IT Shop administrators can assign EMPTemplates to IT Shop shelves.
To add an EMPTemplate to IT Shop
1. In One Identity Manager, select the Epic HealthCare | EMPTemplate category.
2. In the result list, select the EMPTemplate.
3. Select the Add to IT Shop task.
4. In Add assignments, assign the EMPTemplate to the IT Shop shelves.
5. Save the changes.
To delete the EMPTemplate
- Remove the EMPTemplate from the EMPTemplate.csv file.
- In Synchronization Editor, run the Synchronization project.
The EMPTemplate is marked as outstanding in One Identity Manager.
-
Remove the the EMPTemplate assignment from the EPCUser in One Identity Manager.
-
Delete the EMPTemplate from the outstanding object
The EMPTemplate is deleted from the One Identity Manager database and all the associated EMPTemplate to the Epic User.
SubTemplate determines the access rights that a user has on an Epic System. The list of SubTemplates are exported from the target system to the file SubTemplate.csv.
SubTemplate is loaded into One Identity Manager by synchronization. You can assign and remove SubTemplate from an user in One Identity Manager. However, you cannot edit the SubTemplate in One Identity Manager.
To add SubTemplate to users, you can assign the SubTemplate directly to the users. This can be assignments of SubTemplate to departments, cost centers, location, business roles, or to the IT Shop.
SubTemplate assigned to an Epic EMP user must have a priority (also called index). SubTemplates with lower priority take precedence over higher priority. Epic EMP users can be assigned a maximum of seven SubTemplates with priority ranging from 1-7.
In case of conflicting priority in the new assignment, One Identity Manager resolves the conflict by maintaining the priority of the newly created SubTemplate while incrementing the priority of all existing SubTemplate by 1 starting from the conflicting priority.
The default value of IndexPriority can be set in One Identity Designer |Edit Configuration parameters.
Table 20: Default values of IndexPriority
| Default value |
Description |
| SubTemplateDefaultPriority |
This default value is used for indirect assignment |
| SubTemplateMatrixPriority |
This default value is used for SecurityMatrix SubTemplate assignment |
Edit default values of IndexPriority
To edit the default values of IndexPriority
- In Designer, navigate to Edit Navigation Parameter.
- Expand Target Systems and navigate to EPC.
- Update the Default Values.
Format of the CSV file SubTemplate.csv
The CSV file SubTemplate.csv has a specific format with the following columns TemplateID and TemplateName.
The columns in the SubTemplate.csv file are
Table 21: Columns in the SubTemplate.csv file
| Column name |
Description |
| TemplateID |
SubTemplate’s External ID
IMPORTANT:
Only External ID should be used. |
| TemplateName |
Describes the SubTemplate name |
NOTE:
- If the TemplateName or TemplateID field has comma (,), it must be properly escaped with double quotes.
- Sample SubTemplate report can be found in the EPC module’s Miscellaneous folder.
