Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager On Demand Hosted - Identity Management Base Module Administration Guide

Table of Contents

Basics for mapping company structures in One Identity Manager

Hierarchical role structure basic principles

Inheritance directions within a hierarchy Discontinuing inheritance

Basic principles for assigning company resources

Direct company resource assignments Indirect company resource assignments

Secondary assignment Primary assignment

Assigning company resources through dynamic roles Assigning company resources through IT Shop requests

Basics of calculating inheritance

Calculating inheritance by hierarchical roles Calculation of assignments

Preparing hierarchical roles for company resource assignments

Possible assignments of company resources through roles Permitting assignments of employees, devices, workdesks, and company resources to roles Blocking inheritance using roles Preventing employees, devices, or workdesks from inheriting individual roles Preventing inheritance to individual employees, devices, or workdesks Inheritance exclusion: Specifying conflicting roles

Creating and editing dynamic roles Tips about conditions for dynamic roles Testing dynamic role conditions Calculating role memberships for dynamic roles

Schedules for calculating dynamic roles

Creating and editing dynamic role schedules Starting dynamic role schedules immediately Assigning dynamic roles to schedules

Calculating dynamic roles immediately if objects change

Editing properties for immediate recalculation

Calculating role memberships for dynamic roles immediately Excluding dynamic roles from recalculation

Excluding employees from dynamic roles

Removing employees from the exclusion list Main data of exclude lists for dynamic roles

Displaying the dynamic role overview Main data for dynamic roles

Departments, cost centers, and locations

One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations

Role classes for departments, cost centers, and locations

Assigning role types to role classes for departments, cost centers, and locations

Role types for departments, cost centers, and locations

Creating role types for departments, cost centers, and locations Assigning role classes to role types for departments, cost centers, and locations

Functional areas for departments, cost centers, and locations Attestors for departments, cost centers, and locations Approvers and approvers (IT) for departments, cost centers, and locations

Creating and editing departments

General main data for departments Contact data for departments Functional area and risk assessment for departments

Creating and editing cost centers

General main data for cost centers Functional area and risk assessment for cost centers

Creating and editing locations

General main data for locations Location address information Configuring location networks Directions to location Functional area and risk assessment for locations

Setting up IT operating data for departments, cost centers, and locations

Modify IT operating data

Assigning employees, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded employees Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Reports about departments, cost centers, and locations

Employee administration

One Identity Manager users for employee administration Basic data for employee main data

Creating and editing business partners for external employees Mail templates for notifications about employees

Creating and editing mail definitions for employees Base object for mail templates about employees Editing mail templates for employees

Employee's central user account Employee's default email address Employee's central password Mapping multiple employee identities

Employee identity types

Password policies for employees

Predefined password policies Applying employee password policies Changing the password policy for password columns Assigning password policies to departments, cost centers, locations, and business roles Editing password policies for employees Creating password policies for employees General main data for password policies Password policy settings Character classes for passwords Custom scripts for password requirements

Checking passwords with a script Generating passwords with a script

Defining the excluded list for passwords Checking employee passwords Generating passwords for testing employees Informing employees about expiring passwords Displaying locked employees and system users

Creating and editing employees

General employee main data Organizational employee main data Address data for employees Miscellaneous employee main data

Disabling and deleting employees

Temporarily deactivating employees Permanently deactivating employees Reactivate permanently deactivated employees Deferred deletion of employees

Deleting all employee related data Limited access to One Identity Manager Changing the certification status of employees Assigning company resources to employees

Assigning employees to departments, cost centers, and locations Assigning employees to business roles Adding employees to IT Shop custom nodes Assigning application roles to employees Assigning resources directly to employees Assigning software directly to employees Assigning system roles directly to employees Assigning subscribable reports directly to employees

Displaying the origin of employees' roles and entitlements Analyzing role memberships and employee assignments Displaying the employees overview Displaying and deleting employees' Webauthn security keys Determining the language for employees Determining employees working hours Manually assigning user accounts to employees Entering calls for employees Assigning extended properties to employees Employee reports

Managing devices and workdesks

Basic data for device admin

Creating and editing device models

General main data for device models Inventory data for device models

Creating and editing business partners Creating and editing device statuses Creating and editing workdesk statuses Creating and editing workdesk types

Creating and editing devices

General main data for devices Device networking data

Assigning company resources to devices

Assigning devices to departments, cost centers, and locations Assigning devices to business roles

Displaying the device overview Entering service agreements and calls for devices Creating and editing workdesks

General main data of workdesks Location information for workdesks Additional information for workdesks

Assigning company resources to workdesks

Assigning workdesks to departments, cost centers, and locations Assigning workdesks to business roles Assigning software directly to workdesks Assigning system roles directly to workdesks

Displaying the workdesk overview Assigning devices to workdesks Assigning workdesks to employees Entering calls for workdesks Asset data for devices

Creating and editing asset classes for devices Creating and editing asset types for devices Entering investments and investment plans for devices Editing device asset data

Main data for devices' asset data Commercial data for devices

Managing resources

One Identity Manager users for managing resources Basic data for resources

Creating and editing resources Main data for resources Assigning resources to employees

Assigning resources to departments, cost centers, and locations Assigning resources to business roles Assigning resources directly to employees Adding resources to the IT Shop Adding resources in system roles

Displaying the resources overview Assigning extended properties to resources Creating and editing multi-request resources

Main data for multi-request resources

Assigning multi-request resources to employees Adding multi-request resources to the IT Shop Displaying the multi-request resource overview Reports about resources

Setting up extended properties

One Identity Manager users for managing extended properties Creating property groups for extended properties Creating and editing extended properties Main data for extended properties Assigning extended properties to property groups Assigning additional property groups to extended properties Specifying scope limits for extended properties Displaying the extended properties overview Assigning objects to extended properties

Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing employees Configuration parameters for managing devices and workdesks

Main data for multi-request resources

Enter the following main data of a multi-request resource.

Table 64: Main data for a multi-request resource
Property	Description
Multi-request resource Multi requestable/unsubscribable resource	Resource identifier.
Resource type	Resource type for grouping resources.
Service item	Service item through which you can request the resource in the IT Shop. Assign an existing service item or add a new one.
Risk index	Value for evaluating the risk of assigning the resource to employees. Set a value in the range 0 to 1. This input field is only visible if the QER \| CalculateRiskIndex configuration parameter is set. For more information, see the One Identity Manager Risk Assessment Administration Guide.
IT Shop	Specifies whether the resource can be requested through the IT Shop. The resource can be requested by an employee through the Web Portal and distributed using a defined approval process. The resource can still be assigned directly to employees and roles outside of the IT Shop. This option cannot be disabled. For more information, see the One Identity Manager IT Shop Administration Guide.
Only for use in IT Shop	Specifies whether the resource can be requested through the IT Shop. The resource can be requested by an employee through the Web Portal and distributed using a defined approval process. The resource cannot be directly assigned to roles outside the IT Shop. This option cannot be disabled. For more information, see the One Identity Manager IT Shop Administration Guide.
Description	Text field for additional explanation.
Spare field no. 01 ... Spare field no. 10	Additional company-specific information. Use the Designer to customize display names, formats, and templates for the input fields.

Related topics

Resource types

Assigning multi-request resources to employees

Assign multi requestable resources through IT Shop requests to employees. To do this, add employees to a shop as customers. All resources, which are assigned to this shop can be requested by the customers. For more information, see the One Identity Manager IT Shop Administration Guide.

Detailed information about this topic

Adding multi-request resources to the IT Shop

A multi-request resource can be requested by shop customers when it is assigned to an IT Shop shelf. For more information, see the One Identity Manager IT Shop Administration Guide.

To set up multi-request resources and add them as products in the IT Shop

In the Manager, select the Entitlements > Multi-request resources for IT Shop category.

Click in the result list.
Edit the resource's main data.
Save the changes.
Select the Add to IT Shop task.

In the Add assignments pane, assign a shelf.
TIP: In the Remove assignments pane, you can remove shelf assignments.

To remove an assignment
- Select the shelf and double-click .
Save the changes.

To set up multi requestable/unsubscribable resources and to add them as products to the IT Shop

In the Manager, select the Entitlements > Multi requestable/unsubscribable resources for IT Shop category.

Click in the result list.
Edit the resource's main data.
Save the changes.
Select the Add to IT Shop task.

In the Add assignments pane, assign a shelf.
TIP: In the Remove assignments pane, you can remove shelf assignments.

To remove an assignment
- Select the shelf and double-click .
Save the changes.

To remove multi-request resources from all IT Shop shelves

In the Manager, select the Entitlements > Multi-request resources for IT Shop category.

- OR -

In the Manager, select the Entitlements > Multi requestable/unsubscribable resources for IT Shop category.
Select a resource in the result list.
Select the Remove from all shelves (IT Shop) task.
Confirm the security prompt with Yes.
Click OK.

The resource is removed from all shelves by the One Identity Manager Service. This cancels all requests for this resource.

Displaying the multi-request resource overview

Use this task to obtain an overview of the most important information about a multi-request resource. For this, take into account the affiliation of the resource to IT Shop structures.

To obtain an overview of a multi-request resource

In the Manager, select the Entitlements > Multi-request resources for IT Shop category.
Select a resource in the result list.
Select the Multi-Request resource overview task.

To obtain an overview of a requestable/unsubscribable resource

In the Manager, select the Entitlements > Multi requestable/unsubscribable resources for IT Shop category.
Select a resource in the result list.
Select the Multi requestable/Unsubscribable resource overview task.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center