You use One Identity Manager to manage all objects of the SharePoint Online that are required for the optimization of access control in the target system. These objects are imported into the One Identity Manager database during synchronization. You cannot display or edit their properties in the Manager.
Mapping a SharePoint Online environment in One Identity Manager
Architecture overview
One Identity Manager users for managing SharePoint Online
Configuration parameter
Synchronizing a SharePoint Online environment
Setting up the initial synchronization
Managing SharePoint Online user accounts and employees
Users and permissions for synchronizing with SharePoint Online
Setting up the SharePoint Online synchronization server
Preparing a remote connection server for access to the SharePoint Online tenant
Creating a synchronization project for initial synchronization of a SharePoint Online tenant
SharePoint Online synchronization features
Customizing the synchronization configuration
Information required for setting up a synchronization project
Creating an initial synchronization project for SharePoint Online
Configuring the synchronization log
Configuring synchronization with SharePoint Online tenants
Updating schemas
Configuring the provisioning of memberships
Configuring single object synchronization
Accelerating provisioning and single object synchronization
Executing synchronization
Starting synchronization
Displaying synchronization results
Deactivating synchronization
Synchronizing single objects
Tasks after a synchronization
Post-processing outstanding objects
Adding custom tables to the target system synchronization
Managing user accounts through account definitions
Troubleshooting
Account definitions for SharePoint Online user accounts
Managing the assignments of SharePoint Online groups and roles
Creating account definitions
Editing account definitions
Master data for account definitions
Editing manage levels
Creating manage levels
Master data for manage levels
Creating mapping rules for IT operating data
Entering IT operating data
Assigning account definitions to employees
Automatic assignment of employees to SharePoint Online user accounts
Assigning account definitions to departments, cost centers, and locations
Assigning account definitions to business roles
Assigning account definitions to all employees
Assigning account definitions directly to employees
Assigning account definitions to system roles
Adding account definitions in the IT Shop
Assigning account definitions to target systems
Deleting account definitions
Editing search criteria for automatic employee assignment
Changing the manage level in SharePoint Online user accounts
Assigning account definitions to linked SharePoint Online user accounts
Manually linking employees to SharePoint Online user accounts
Application cases for SharePoint Online user account
Supported user account types
Assigning SharePoint Online entitlements to SharePoint Online user accounts in One Identity Manager
Mapping of SharePoint Online objects in One Identity Manager
Assigning SharePoint Online entitlements to departments, cost centers, and locations
Assigning SharePoint Online entitlements to business roles
Adding SharePoint Online entitlements to system roles
Adding SharePoint Online entitlements to the IT Shop
Assigning SharePoint Online user accounts directly to an entitlement
Assigning SharePoint Online entitlements directly to a user account
Assigning SharePoint Online roles to SharePoint Online groups
Assigning SharePoint Online groups to SharePoint Online roles
Effectiveness of SharePoint Online entitlement assignments
SharePoint Online group inheritance based on categories
Overview of all assignments
SharePoint Online tenants
Handling of SharePoint Online objects in the Web Portal
Basic data for managing a SharePoint Online environment
General master data for SharePoint Online tenants
Additional tasks for managing SharePoint Online tenant
SharePoint Online user accounts
Creating SharePoint Online user accounts
Editing master data for SharePoint Online user accounts
Entering master data for SharePoint Online user accounts
Additional tasks for managing SharePoint Online user accounts
Deleting and restoring SharePoint Online user accounts
SharePoint Online groups
Creating SharePoint Online groups
Editing master data for SharePoint Online groups
SharePoint Online group master data
Additional tasks for managing SharePoint Online groups
Deleting SharePoint Online groups
SharePoint Online permission levels
Creating SharePoint Online permission levels
Editing master data for SharePoint Online permission levels
General master data for SharePoint Online permission levels
Overview of SharePoint Online permission levels
Deleting SharePoint Online permission levels
SharePoint Online site collections
General master data for a SharePoint Online site collection
Address data for a SharePoint Online site collection
Specifying categories for inheriting SharePoint Online groups
Additional tasks for managing site collections
SharePoint Online sites
General master data for SharePoint Online sites
Address data of SharePoint Online sites
Design information of SharePoint Online sites
Overview of SharePoint Online sites
Inheritance of SharePoint Online permissions by SharePoint Online sites
SharePoint Online roles
SharePoint Online authentication modes
Job server for SharePoint Online-specific process handling
Target system managers
Configuration parameters for managing SharePoint Online
Default project template for SharePoint Online
Editing system objects
About us
Mapping of SharePoint Online objects in One Identity Manager
Mapping of SharePoint Online objects in One Identity Manager
SharePoint Online tenants
A SharePoint Online tenant is the base object of a SharePoint Online system. A SharePoint Online tenant must have a direct relationship to an Azure Active Directory tenant. There is only one tenant for each connected SharePoint Online system.
SharePoint Online tenants are required for the configuration of provisioning processes, the automatic assignment of employees to user accounts, and the inheritance of groups by user accounts through categories within a SharePoint Online.
NOTE: SharePoint Online tenants cannot be created in One Identity Manager. The Synchronization Editor sets up SharePoint Online the tenants in the One Identity Manager database.
Detailed information about this topic
General master data for SharePoint Online tenants
Mapping of SharePoint Online objects in One Identity Manager > SharePoint Online tenants > General master data for SharePoint Online tenants
On the General tab, you can see the following master data:
|
Property |
Description | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
Name |
Name of the organization that is used for logging on to Office 365. | |||||||||
|
Azure Active Directory tenant |
Unique identifier of the Azure Active Directory tenant. | |||||||||
|
Target system managers |
Application role, in which target system managers are specified for the tenant. Target system managers only edit the objects from tenants to which they are assigned. A different target system manager can be assigned to each tenant. Select the One Identity Manager application role whose members are responsible for administration of this tenant. Use the | |||||||||
|
Synchronized by |
Type of synchronization through which data is synchronized between the tenant and One Identity Manager. Once objects are available for this tenant in One Identity Manager, the type of synchronization can no longer be changed. When creating a tenant using Synchronization Editor, One Identity Manager is used.
NOTE: If you select No synchronization, you can define custom processes to exchange data between One Identity Manager and the target system. | |||||||||
|
Default website URL |
Root site collection for the tenants. | |||||||||
|
Compatibility range |
Specifies which compatibility range is available for new website collections. | |||||||||
|
Resource quota |
Specifies the value of the resource quota for the tenant. | |||||||||
|
Resource consumption quota |
Specifies the value of the resource quota used by all of the tenant's websites. | |||||||||
|
Show "All users" claim |
Enables the administrator to hide the All users option in the person selection. | |||||||||
|
Show "Everyone" claim |
Enables the administrator to hide the Everyone group in the person selection. | |||||||||
|
Show "Everyone except external users" |
Enables the administrator to hide the Everyone except external users group in the person selection. |
button to add a new application role.Related topics
Additional tasks for managing SharePoint Online tenant
Mapping of SharePoint Online objects in One Identity Manager > SharePoint Online tenants > Additional tasks for managing SharePoint Online tenant
After you have entered the master data, you can run the following tasks.
Overview of a SharePoint Online tenant
Editing the synchronization project for a SharePoint Online tenant
|
Task |
Topic |
|---|---|
|
Overview of SharePoint Online tenants |
|
|
Define search criteria for employee assignment |
|
|
Edit synchronization project |
Editing the synchronization project for a SharePoint Online tenant |
|
Synchronize this object |