Chat now with support
Chat with Support

Identity Manager 9.1 - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Dynamic roles Departments, cost centers, and locations
One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations Creating and editing departments Creating and editing cost centers Creating and editing locations Setting up IT operating data for departments, cost centers, and locations Assigning employees, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded employees Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Certifying departments, cost centers, and locations Reports about departments, cost centers, and locations
Employee administration
One Identity Manager users for employee administration Basic data for employee main data Employee's central user account Employee's default email address Employee's central password Mapping multiple employee identities Password policies for employees Creating and editing employees Disabling and deleting employees Deleting all employee related data Limited access to One Identity Manager Changing the certification status of employees Assigning company resources to employees Displaying the origin of employees' roles and entitlements Analyzing role memberships and employee assignments Displaying the employees overview Displaying and deleting employees' Webauthn security keys Determining the language for employees Determining employees working hours Manually assigning user accounts to employees Entering calls for employees Assigning extended properties to employees Employee reports
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing employees Configuration parameters for managing devices and workdesks

Analyzing role memberships and employee assignments

The Overview of all assignments report is displayed for some objects, such as authorizations, compliance rules, or roles. The report finds all the roles, for example, departments, cost centers, locations, business roles, and IT Shop structures in which there are employees who own the selected base object. In this case, direct as well as indirect base object assignments are included.

Examples:

  • If the report is created for a resource, all roles are determined in which there are employees with this resource.

  • If the report is created for a group or another system entitlement, all roles are determined in which there are employees with this group or system entitlement.

  • If the report is created for a compliance rule, all roles are determined in which there are employees who violate this compliance rule.

  • If the report is created for a department, all roles are determined in which employees of the selected department are also members.

  • If the report is created for a business role, all roles are determined in which employees of the selected business role are also members.

To display detailed information about assignments

  • To display the report, select the base object from the navigation or the result list and select the Overview of all assignments report.

  • Click the Used by button in the report toolbar to select the role class for which you want to determine whether roles exist that contain employees with the selected base object.

    All the roles of the selected role class are shown. The color coding of elements identifies the role in which there are employees with the selected base object. The meaning of the report control elements is explained in a separate legend. To access the legend, click the icon in the report's toolbar.

  • Double-click a control to show all child roles belonging to the selected role.

  • By clicking the button in a role's control, you display all employees in the role with the base object.

  • Use the small arrow next to to start a wizard that allows you to bookmark this list of employees for tracking. This creates a new business role to which the employees are assigned.

Figure 13: Toolbar of the Overview of all assignments report.

Table 40: Meaning of icons in the report toolbar

Icon

Meaning

Show the legend with the meaning of the report control elements

Saves the current report view as a graphic.

Selects the role class used to generate the report.

Displays all roles or only the affected roles.

Displaying the employees overview

Use this task to obtain an overview of the most important information about an employee.

To obtain an overview of an employee

  1. In the Manager, select the Employees > Employees category.

  2. Select the employee in the result list.

  3. Select the Employee overview task.

    The most important information about an employee is shown on this form, including the employee's contact data, user accounts, and affiliation to company structures. The assigned company resources and access to IT Shop structures and IT Shop requests are displayed.

    The employee's responsibilities within the One Identity Manager are displayed on the form. This includes the application roles that an employee has been assigned within the One Identity Manager and the functions as department manager, cost center manager, or approver within the IT Shop.

  4. Select the Employee entitlements overview task.

    This form shows the system entitlements and all the target system groups allocated to an employee.

Displaying and deleting employees' Webauthn security keys

One Identity offers users the option to log in, simply and securely, to One Identity Manager web applications with help of (physical) security keys. These security keys support the W3C standard WebAuthn.

For more information about using security keys in the Web Portal, see the One Identity Manager Web Designer Web Portal User Guide. For more about configuring this method, see the One Identity Manager Web Application Configuration Guide.

As personnel administrator, you can view employees' security keys and delete them if necessary.

To display an employee's security key

  1. In the Manager, select the Employees > Employees category.

  2. Select the employee in the result list.

  3. Select the Show webauthn security keys task.

    This shows all the employee's security keys.

  4. Select one of the security keys in the list to show its details.

To delete an employee's security key

  1. In the Manager, select the Employees > Employees category.

  2. Select the employee in the result list.

  3. Select the Show webauthn security keys task.

  4. Select the security in the list and click Remove.

  5. Save the changes.

Determining the language for employees

In order for email notifications within the request process in the IT Shop or during attestation to be sent in the recipients language, the employee's language has to be determined.

  • States and countries and their languages already exist in the One Identity Manager default installation. Verify and edit this information in the Designer. For more information, see the One Identity Manager Configuration Guide.

  • Add the country and state of the primary location to the primary department, the primary cost center, the primary business role, or directly to the employee. To map special cases, you can also add the language directly to the location, department, cost center, or employee.

An employee‘s language is determined in the following order:

  1. Language that is directly assigned to the employee.

  2. Language of the employee's state.

  3. Language of the employee's country.

  4. Language directly assigned to the employee's location.

  5. Language of the primary location's state.

  6. Language of the primary location's country.

  7. Language directly assigned to the employee's primary department.

  8. Language of the primary department's state.

  9. Language of the primary department's country.

  10. Language directly assigned to the employee's primary cost center.

  11. Language of the primary cost center's state.

  12. Language of the primary cost center's country.

  13. Language directly assigned to an employee's primary business role

  14. Language of the primary business role's state.

  15. Language of the primary business role's country.

  16. Fallback, in case the language could not be determined with this sequence:

    1. Language from the Common | MailNotification | DefaultCulture configuration parameter.

    2. Language en-US.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating