To create a new account definition
1. In One Identity Manager, select Epic healthcare | Basic configuration data | Account definitions | Account definitions.
2. Select an account definition in the result list. Select Change master data.
- OR -
Click in the result list toolbar.
3. Enter the account definition's master data.
4. Save the changes
For more information, see Master data for an account definition.
Table 7: Master data for an account definition
| Property |
Description |
| Account definition |
Account definition name. |
| User account table |
Table in the One Identity Manager schema that maps user accounts. |
| Target system |
Target system to which the account definition applies. |
| Required account definition |
Required account definitions. Define the dependencies between account definitions. When this account definition is requested or assigned, the required account definition is automatically requested or assigned with it. |
| Description |
Spare text box for additional explanation. |
| Manage level (initial) |
Manage level to use by default when you add new user accounts. |
| Risk index |
Value for evaluating the risk of account definition assignments to identities. Enter a value between 0 and 1. This input field is only visible if the configuration parameter QER | CalculateRiskIndex is activated. For more detailed information, see the One Identity Manager Risk Assessment Administration Guide. |
|
Service item |
Service item Service item through which you can request the account definition in the IT Shop. Assign an existing service item or add a new one. |
|
IT Shop |
Specifies whether the account definition can be requested through the IT Shop. The account definition can be ordered by an identity over the Web Portal and distributed using a defined approval process. The account definition can also be assigned directly to identities and roles outside of IT Shop. |
|
Only for use in IT Shop |
Specifies whether the account definition can only be requested through the IT Shop. The account definition can be ordered by an identity over the Web Portal and distributed using a defined approval process. This means, the account definition cannot be directly assigned to roles outside the IT Shop. |
|
Automatic assignment to identities |
Specifies whether the account definition is assigned automatically to all internal identities. The account definition is assigned to every identity not marked as external, on saving. New identities automatically obtain this account definition as soon as they are added.
IMPORTANT: Only set this option if you can ensure that all current internal identities in the database and all pending newly added internal identities obtain a user account in this target system. Disable this option to remove automatic assignment of the account definition to all identities. The account definition cannot be reassigned to identities from this point on. Existing account definition assignments remain intact. |
|
Retain account definition if permanently disabled |
Specifies the account definition assignment to permanently disabled identities. Option set: The account definition assignment remains in effect. The user account stays the same. Option not set: The account definition assignment is not in effect. The associated user account is deleted. |
|
Retain account definition if temporarily disabled |
Specifies the account definition assignment on deferred deletion of identities. Option set: The account definition assignment remains in effect. The user account stays the same. Option not set: The account definition assignment is not in effect. The associated user account is deleted. |
|
Retain account definition on security risk |
Specifies the account definition assignment to identities posing a security risk. Option set: The account definition assignment remains in effect. The user account stays the same. Option not set: The account definition assignment is not in effect. The associated user account is deleted. |
|
Resource type |
Resource type for grouping account definitions. |
|
Spare field 01 - spare field 10 |
Additional company specific information. Use Designer to customize display names, formats and templates for the input fields |
