Chat now with support
Chat with Support

Identity Manager 9.3 - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Dynamic roles Departments, cost centers, and locations
One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations Creating and editing departments Creating and editing cost centers Creating and editing locations Setting up IT operating data for departments, cost centers, and locations Assigning identities, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded identities Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Certifying departments, cost centers, and locations Reports about departments, cost centers, and locations
Identity administration
One Identity Manager users for managing identities Basics for managing identities Creating and editing identities Assigning company resources to identities Displaying the origin of identities' roles and entitlements Analyzing role memberships and identity assignments Deactivating and deleting identities Deleting all personal data Limited access to One Identity Manager Changing the certification status of identities Displaying the identities overview Displaying and deleting identities' Webauthn security keys Determining the language for identities Determining identities working hours Manually assigning user accounts to identities Entering tickets for identities Assigning extended properties to identities Reports about identities Basic configuration data for identities
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing identities Configuration parameters for managing devices and workdesks

Functional area and risk assessment for cost centers

Here, you can enter values to classify the cost center, which analyzes the risk of a cost center with respect to identity audit.

Table 16: Main data of a cost center's functional area
Property Description

Country

Country. You require this to determine the identity’s language and working hours.

State

State. You require this to determine the identity’s language and working hours.

Functional area

Cost center's function area. This data is required for cost center's risk assessment.

Risk index (calculated)

A risk index is calculated for the cost center risk assessment based on assigned company resources. This field is only visible if the QER | CalculateRiskIndex configuration parameter is set. For more information about risk assessment, see the One Identity Manager Risk Assessment Administration Guide.

Transparency index

Specifies how well you can trace cost center assignments. Use the slider to enter a value between 0 and 1.

0: no transparency

1: full transparency

Max. number of rule violations

Number of rule violations allowed in this cost center. The value can be evaluated when compliance rules are checked. For more information, see the One Identity Manager Compliance Rules Administration Guide.

NOTE: This property is only available if the Compliance Rules Module is installed.

Turnover for this unit

Turnover for the cost center.

Earnings for this unit

Earnings for the cost center.

Related topics

Creating and editing locations

Create new locations or edit the master data of existing locations.

To create a location

  1. In the Manager, select the Organizations > Locations category.

  2. Click in the result list.

  3. On the main data form, edit the main data of the location.

  4. Save the changes.

To edit the main data of a location

  1. In the Manager, select the Organizations > Locations category.

  2. In the result list, select a location and run the Change main data task.

  3. Edit the location’s main data.

  4. Save the changes.
Detailed information about this topic

General main data for locations

Enter the following data for a location.

Table 17: General main data of a location
Property Description

Location

Name of the location. Translate the given text using the button.

Short name

Short name of the location.

Name

Additional name for the location.

Parent location

Parent of location in the hierarchy.

To organize locations hierarchically, select the parent location in the drop-down. Leave this field empty if the location is at the top level of the location hierarchy.

Full name

Complete name of the location including parent locations. Translate the given text using the button.

Role type Role types for more detailed classification.

Manager

Manager responsible for the location.

2nd Manager

Assistant manager of the location.

Additional manager

Application role for a group of managers and deputies who manage this location.

To create a new application role, click . Enter the application role name and assign a parent application role.

Attestors

Applications role whose members are authorized to approve attestation cases for this location.

To create a new application role, click . Enter the application role name and assign a parent application role.

NOTE: This property is available if the Attestation Module is installed.

Department

Department to which the location is primary assigned.

Cost center

Cost center to which the location is primary assigned.

Additional remarks

Text field for additional explanation.

Role approver

Application role whose members approve IT Shop requests for members of this location.

To create a new application role, click . Enter the application role name and assign a parent application role.

Role approver (IT)

Application role whose members approve IT Shop requests for members of this location.

To create a new application role, click . Enter the application role name and assign a parent application role.

Description

Text field for additional explanation.

Comment

Text field for additional explanation.

Remarks

Text field for additional explanation.

Certification status

Certification status of the location. You can select the following certification statuses:

  • New: The location was newly added to the One Identity Manager database.

  • Certified: The location main data was granted approval by the manager.

  • Denied: The location data was denied approval by the manager.

The certification status can be set depending on the result of regular attestations.

Import data source Target system or data source, from which the data set was imported.

Deactivated

Specifies whether the location is actively used. Set this option if the location is not used. This option does not have any effect on the calculation of inheritance.

Block inheritance

Specifies whether inheritance for this location can be discontinued. Set this option to discontinue inheritance within the location hierarchy.

X500 nodes

Select this option to label a location for exporting to an X500 schema.

Identities do not inherit

Specifies whether identity inheritance should be temporarily prevented for this location.

Devices do not inherit

Specifies whether device inheritance should be temporarily prevented for this location.

Workdesks do not inherit

Specifies whether workdesk inheritance should be temporarily prevented for this location.

Dynamic roles not allowed Specifies whether a dynamic role can be created for the location.

Spare field no. 01 ... Spare field no. 10

Additional company-specific information. Use the Designer to customize display names, formats, and templates for the input fields.

Spare date no. 01 ... Spare date no. 03

Additional company-specific information. Use the Designer to customize display names, formats, and templates for the input fields.

Related topics

Location address information

Enter the following main data of contacting the location.

Table 18: Location's address data
Property Description

Address

Postal address of the location.

Street

Street or road.

Building

Building

Zip code

Zip code.

City

City.

Country

Country. You require this to determine the identity’s language and working hours.

State

State. You require this to determine the identity’s language and working hours.

Phone

Telephone number of the location.

Quick dial

Telephone short entry (without code).

Fax

Fax number of the location.

Room

Room.

Comment (room)

Text field for additional explanation.

Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating