Chat now with support
Chat with Support

Identity Manager 8.0.1 - Administration Guide for Connecting to Active Directory

Managing Active Directory Environments Setting up Active Directory Synchronization Base Data for Managing Active Directory Active Directory Domains Active Directory User Accounts Active Directory Contacts Active Directory groups Active Directory Security IDs Active Directory Container Structures Active Directory computer Active Directory Printers Active Directory Locations Reports about Active Directory Objects Appendix: Configuration Parameters for Managing Active Directory Appendix: Default Project Template for Active Directory Appendix: Authentication Modules for Logging into the One Identity Manager

Assigning Active Directory Groups Directly to Active Directory User Accounts

Assigning Active Directory Groups Directly to Active Directory User Accounts

Groups can be assigned directly or indirectly to a user account. Indirect assignment is carried out by allocating the employee and groups in hierarchical roles, like departments, cost centers, locations or business roles. If the employee has a user account in Active Directory, the groups in the role are inherited by this user account.

To react quickly to special requests, you can assign groups directly to the user account.

To assign groups directly to user accounts

  1. Select the category Active Directory | User accounts.
  2. Select the user account in the result list.
  3. Select Assign groups in the task view.
  4. Assign groups in Add assignments.

    The view- OR -

    Remove groups from Remove assignments.

  5. Save the changes.

NOTE: The user account's primary group is already assigned and labeled as "Not yet applied". Edit the user account's master data to change its primary group.
Related Topics

Assigning Wizards to an Active Directory User Account

Assigning Wizards to an Active Directory User Account

Assign a secretary to a user account. The secretary is displayed in the email recipient’s properties in Microsoft Outlook.

To assign a secretary to a user account

  1. Select the category Active Directory | User accounts.
  2. Select the user account in the result list.
  3. Select Assign secretaries in the task view.
  4. Select the table which contains the user from the menu Table at the top of the form. You have the following options:
    • Active Directory user accounts
    • Active Directory contacts
    • Active Directory groups
  5. Assign secretaries in Add assignments.

    - OR -

    Remove secretaries from Remove assignments.

  6. Save the changes.

Moving an Active Directory User Account

Moving an Active Directory User Account

NOTE: User accounts can only be moved within a domain.

To move a user account

  1. Select the category Active Directory | User accounts.
  2. Select the user account in the result list.
  1. Select Change master data in the task view.
  2. Select Change Active Directory container in the task view.
  3. Confirm the security prompt with Yes.
  4. Select the new container from Containers on the General tab.
  5. Save the changes.

Assign Extended Properties to an Active Directory User Account

Assign Extended Properties to an Active Directory User Account

Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.

To specify extended properties for a user account

  1. Select the category Active Directory | User accounts.
  2. Select the user account in the result list.
  3. Select Assign extended properties in the task view.
  4. Assign extended properties in Add assignments.

    - OR -

    Remove assignments to extended properties in Remove assignments.

  5. Save the changes.

For more detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

Related Documents