Chat now with support
Chat with Support

Identity Manager 8.1.4 - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Managing departments, cost centers, and locations Working with dynamic roles Employee administration
One Identity Manager users for employee administration Basic data for employee master data Entering employee master data Employee's central user account Employee's central password Employee's default email address Mapping multiple employee identities Disabling and deleting employees Password policies for employees Limited access to One Identity Manager Assigning company resources to employees Displaying the origin of an employee's roles and entitlements Analyzing role memberships and employee assignments Additional tasks for managing employees Determining an employee’s language Determining an employee's working hours Employee reports
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Effective configuration parameters for setting up employees Configuration parameters for managing devices and workdesks

General master data for a department

Enter the following data for a department.

Table 10: General master data for a department
Property Description

Department

Name of the department

Short name

Short name of the department

Object ID

Unique department object ID. The object ID is required, for example, in SAP systems for assigning employees to departments.

Parent department

Parent of department in the hierarchy.

To organize departments hierarchically, select the parent department in the menu. Leave this field empty if the department is at the top level of the department hierarchy.

Role type Role types for more detailed classification.
Location

Location to which the department is primary assigned.

Default printer server

Printer server for the department. Select a server from the menu to assign it to the department.

NOTE: This property is only available if the Active Directory Module is installed.
Manager

Manager responsible for the department.

2nd Manager Assistant manager of the department.
Attestors

Applications role whose members are authorized to approve attestation cases for this department.

To create a new application role, click . Enter the application role name and assign a parent application role.

NOTE: This property is available if the Attestation Module is installed.
Cost center Cost center to which the department is primary assigned.
Role approver

Application role whose members approve IT Shop requests for members of this department.

To create a new application role, click . Enter the application role name and assign a parent application role.

Role approver (IT)

Application role whose members approve IT Shop requests for members of this department.

To create a new application role, click . Enter the application role name and assign a parent application role.

Description Text field for additional explanation.
Comment Text field for additional explanation.
Remarks Text field for additional explanation.

Certification status

Certification status of the department. You can select the following certification statuses:

  • New – The department was newly added to the One Identity Manager database.
  • Certified – Department master data was granted approval by the manager.
  • Denied – Department master data was denied approval by the manager.
Import data source Target system or data source, from which the data set was imported.
Full name Full name of the department include parent departments.
Deactivated

Specifies whether the department is actively used. Set this option if the department is not used. This option does not have any effect on the calculation of inheritance.

Block inheritance Specifies whether inheritance for this department can be discontinued. Set this option to discontinue inheritance within the department hierarchy.
X500 nodes Select this option to label a department for exporting to an X500 schema.
Employees do not inherit Specifies whether employee inheritance should be temporarily prevented for this department.
Devices do not inherit Specifies whether device inheritance should be temporarily prevented for this department.
Workdesks do not inherit Specifies whether workdesk inheritance should be temporarily prevented for this department.
Dynamic roles not allowed Specifies whether a dynamic role can be created for the department.

Spare field no. 01 ... Spare field no. 10

Additional company-specific information. Use the Designer to customize display names, formats, and templates for the input fields.

Spare date no. 01 ... Spare field no. 03

Additional company-specific information. Use the Designer to customize display names, formats, and templates for the input fields.

Related topics

Contact data for departments

Enter the following contact data for departments Select the button next to the input field to activate it and add add data. Use the button to remove data from a list.

Table 11: Contact data for departments
Property Description
Email addresses Email addresses for the department.
Visitors address Department address for visitors.
Visiting hours Department hours for visitors.
Phone hours Department telephone hours.
Business hours Department business hours.
Zip code Department's zip code.

Functional area and risk assessment

Here, you can enter values to classify the department, which analyzes the risk of a department with respect to identity audit.

Table 12: Master data of a department's functional area
Property Description

Country

Country. You require this to determine the employee’s language and working hours.

State

State. You require this to determine the employee’s language and working hours.

Functional area

Department functional area This data is required for department's risk assessment.

Risk index (calculated)

A risk index is calculated for the department risk assessment based on assigned company resources. This input field is only visible if the QER | CalculateRiskIndex configuration parameter is set.

Transparency index

Specifies how well you can trace department assignments. Use the slider to enter a value between 0 and 1.

0 ... no transparency

1 ... full transparency

Max. number of rule violations

Specify how many rule violations are permitted for this department. The value can be evaluated when compliance rules are checked.

NOTE: This property is only available if the Compliance Rules Module is installed.
Turnover for this unit Turnover for this department.
Earnings for this unit Earnings for this department.
Related topics

Editing cost centers

To edit a cost center

  1. Select the Organizations | Cost centers category.
  2. Select a cost center in the result list. Select the Change master data task.

    - OR -

    Click in the result list.

  3. Edit the data cost center's master data.
  4. Save the changes.
Detailed information about this topic
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating