Converse agora com nosso suporte
Chat com o suporte

Active Roles 7.5 - Administration Guide

Introduction About Active Roles Getting Started Rule-based Administrative Views Role-based Administration
Access Templates as administrative roles Access Template management tasks Examples of use Deployment considerations Windows claims-based Access Rules
Rule-based AutoProvisioning and Deprovisioning
About Policy Objects Policy Object management tasks Policy configuration tasks
Property Generation and Validation User Logon Name Generation Group Membership AutoProvisioning E-mail Alias Generation Exchange Mailbox AutoProvisioning AutoProvisioning for SaaS products OneDrive Provisioning Home Folder AutoProvisioning Script Execution Office 365 and Azure Tenant Selection User Account Deprovisioning Office 365 Licenses Retention Group Membership Removal Exchange Mailbox Deprovisioning Home Folder Deprovisioning User Account Relocation User Account Permanent Deletion Group Object Deprovisioning Group Object Relocation Group Object Permanent Deletion Notification Distribution Report Distribution
Deployment considerations Checking for policy compliance Deprovisioning users or groups Restoring deprovisioned users or groups Container Deletion Prevention policy Picture management rules Policy extensions
Workflows
Understanding workflow Workflow activities overview Configuring a workflow
Creating a workflow definition Configuring workflow start conditions Configuring workflow parameters Adding activities to a workflow Configuring an Approval activity Configuring a Notification activity Configuring a Script activity Configuring an If-Else activity Configuring a Stop/Break activity Configuring an Add Report Section activity Configuring a Search activity Configuring CRUD activities Configuring a Save Object Properties activity Configuring a Modify Requested Changes activity Enabling or disabling an activity Enabling or disabling a workflow Using the initialization script
Example: Approval workflow E-mail based approval Automation workflow Activity extensions
Temporal Group Memberships Group Family Dynamic Groups Active Roles Reporting Management History
Understanding Management History Management History configuration Viewing change history
Workflow activity report sections Policy report items Active Roles internal policy report items
Examining user activity
Entitlement Profile Recycle Bin AD LDS Data Management One Identity Starling Management One Identity Starling Two-factor Authentication for Active Roles Managing One Identity Starling Connect Azure AD, Office 365, and Exchange Online management
Configuring Active Roles to manage hybrid AD objects Managing Hybrid AD Users Unified provisioning policy for Azure O365 Tenant Selection, Office 365 License Selection, and Office 365 Roles Selection, and OneDrive provisioning Office 365 roles management for hybrid environment users Managing Office 365 Contacts Managing Hybrid AD Groups Managing Office 365 Groups Managing Azure Security Groups Managing cloud-only Azure users Managing cloud-only Azure guest users Managing cloud-only Azure contacts Changes to Active Roles policies for cloud-only Azure objects Managing room mailboxes
Managing Configuration of Active Roles
Connecting to the Administration Service Adding and removing managed domains Using unmanaged domains Evaluating product usage Creating and using virtual attributes Examining client sessions Monitoring performance Customizing the console Using Configuration Center Changing the Active Roles Admin account Enabling or disabling diagnostic logs Active Roles Log Viewer
SQL Server Replication Appendix A: Using regular expressions Appendix B: Administrative Template Appendix C: Communication ports Appendix D: Active Roles and supported Azure environments Appendix E: Enabling Federated Authentication Appendix F: Active Roles integration with other One Identity and Quest products Appendix G: Active Roles integration with Duo MFA Appendix H: Active Roles integration with Okta MFA

Changes to Active Roles policies for cloud-only Azure objects

Active Roles 7.4.4 introduced support for cloud-only Azure objects: Azure users, guest users and contacts. To support the management of these cloud-only Azure objects, the existing Active Roles policies received the following updates:

  • The Property Generation and Validation policy now supports specifying object property rules for cloud-only Azure objects. To get started with provisioning cloud-only Azure properties, Active Roles contains a new built-in policy for provisioning cloud-only Azure properties. Find the policy in the following node of the Active Roles MMC console:

    Configuration > Policies > Administration > BuiltIn > Azure CloudOnly Policy - Default Rules to Generate Properties

  • The Group Membership AutoProvisioning policy now supports specifying group membership rules to automatically assign (or unassign) cloud-only Azure users and guest users to (or from) O365 Groups located in the same Azure tenant as the provisioned Azure objects.

    In the New Provisioning Policy Wizard of the Active Roles MMC console, the cloud-only Azure objects supported for provisioning are listed in the Object Type Selection > Select Object Type dialog, while the O365 Groups can be selected in the Group Selection > Browse for Container dialog.

  • Script Execution policies now also support PowerShell and other custom scripts for provisioning cloud-only Azure objects. As part of this change, Active Roles contains a new built-in script module that you can use to configure policies for generating cloud-only Azure user passwords complying with Azure AD password generation policies. This built-in script module is available at the following node of the Active Roles MMC console:

    Configuration > Script Modules > BuiltIn > Generate User Password - Azure only

Managing room mailboxes

Room mailbox is a type of Exchange Online resource mailbox assigned to a physical location, such as a meeting room. Using room mailboxes that an administrator creates, users can reserve rooms by adding room mailboxes to meeting requests as an attendee or location.

In the Active Roles Web Interface, you can create, manage or delete room mailboxes in Directory Management > Tree> Azure > Resource Mailboxes. Room mailboxes created in the Active Roles Web Interface are synchronized to the Exchange admin center (admin.exchange.microsoft.com), where you can find them in Home > Resources.

For more information about room mailboxes, see Manage resource mailboxes in Exchange Online in the Microsoft Exchange Online documentation.

Creating a new room mailbox

To create a new room mailbox in the Active Roles Web Interface, follow the steps.

To create a new room mailbox

  1. In the Active Roles Web Interface, navigate to Directory Management > Tree> Azure > Resource Mailboxes.

    The list of resource mailboxes of the selected tenant is displayed.

    Figure 139: Directory Management > Tree View > Azure > Resource Mailboxes — Listing the resource mailboxes in the tenant

  2. In the right pane, click Create New Room Mailbox.

    The Create New Room Mailbox window opens.

  3. On the General tab, set the following general details of the room:

    • (Optional) Display name

    • Name: Enter a name for the room.

      NOTE: If you enter a name that is already used, you will receive an error message and Exchange Online will not allow you creating the new room mailbox. To create a new room mailbox, enter a different name.

      NOTE: To change the name of an existing room mailbox:

      1. In the right pane, click Rename.

      2. Display name: Enter a new display name for the room.

      3. Name: Enter a new name for the room.

      4. Click Finish.

    • (Optional) Primary SMTP Address (leave blank for default value)

      To specify the domain, use the drop-down.

      The default value of the Primary SMTP Address is the name and the domain name of the room mailbox. For example, roommailbox1@activeroles.onmicrosoft.com, where roommailbox1 is the name and activeroles.onmicrosoft.com is the domain name.

    • (Optional) Capacity

    • (Optional) Hide from global address lists

      Select this check box if you do not want the room mailbox to appear in the address book and other address lists defined in your Exchange organization.

      By default, this check box is not selected.

  4. (Optional) On the Calendar Processing tab, set the following optional details of the room:

    • Maximum duration (hours)

    • Booking window (days)

    • Allow repeating meetings

      By default, this check box is selected.

    • Allow scheduling only during work hours

      By default, this check box is selected.

  5. (Optional) On the Location tab, set the following optional details of the company:

    • Department

    • Company Name

    • Street Address

    • City

    • State or Province

    • Zip or Postal Code

    • Country: You must enter a valid country code or country name, for example: US or United States of America (the).

  6. Click Finish.

If the operation is successful, the newly-created room mailbox appears in the list of Resource Mailboxes.

In the right pane, the name of the room mailbox appears with the following available actions:

  • Room Mailbox Properties

  • Rename

  • Delete

The newly-created room mailbox also appears in the Exchange admin center, in Home > Resources.

Viewing or modifying a room mailbox

To view or modify the properties of a room mailbox in the Active Roles Web Interface, follow the steps.

NOTE: To change the name of an existing room mailbox:

  1. In the right pane, click Rename.

  2. Display name: Enter a new display name for the room.

  3. Name: Enter a new name for the room.

  4. Click Finish.

To view or modify the properties of a room mailbox

  1. In the Active Roles Web Interface, navigate to Directory Management > Tree> Azure > Resource Mailboxes.

    The list of resource mailboxes of the selected tenant is displayed.

    Figure 140: Directory Management > Tree View > Azure > Resource Mailboxes — Listing the resource mailboxes in the tenant

  2. Select the room mailbox you want to view or modify.

    In the right pane, the name of the room mailbox appears with the following available actions:

    • Room Mailbox Properties

    • Rename

    • Delete

  3. In the right pane, click Room Mailbox Properties.

    The Room Mailbox Properties window opens.

  4. On the General tab, view or modify the following general details of the room:

    • Display name

    • Object GUID: The Exchange Online GUID of the mailbox object in the Exchange Cloud. You cannot modify this value.

    • External directory ID: The Azure Active Directory (AD) object of the user object connected to the mailbox object in Azure AD. You cannot modify this value.

    • User Principal Name: The room mailbox address in User Principal Name (UPN) format. You cannot modify this value.

    • Primary SMTP Address: You cannot modify this value.

    • Capacity

    • Hide from global address lists

      Select this check box if you do not want the room mailbox to appear in the address book and other address lists defined in your Exchange organization.

      By default, this check box is not selected.

  5. On the Calendar Processing tab, view or modify the following optional details of the room:

    • Maximum duration (hours)

    • Booking window (days)

    • Allow repeating meetings

      By default, this check box is selected.

    • Allow scheduling only during work hours

      By default, this check box is selected.

  6. On the Location tab, view or modify the following optional details of the company:

    • Department

    • Company Name

    • Street Address

    • City

    • State or Province

    • Zip or Postal Code

    • Country: You must enter a valid country code or country name, for example: US or United States of America (the).

  7. To close the Room Mailbox Properties window:

    1. To update the properties of the room mailbox, click Save.

    2. To close the window without saving the changes, click Cancel.

If the operation is successful, the updated properties of the room mailbox appear both in the Active Roles Web Interface and in the Exchange admin center.

Documentos relacionados

The document was helpful.

Selecione a classificação

I easily found the information I needed.

Selecione a classificação