Identity Manager 8.0.1 - Administration Guide for Connecting to Active Directory

Managing Active Directory Environments Setting up Active Directory Synchronization Base Data for Managing Active Directory Active Directory Domains Active Directory User Accounts Active Directory Contacts Active Directory groups Active Directory Security IDs Active Directory Container Structures Active Directory computer Active Directory Printers Active Directory Locations Reports about Active Directory Objects Appendix: Configuration Parameters for Managing Active Directory Appendix: Default Project Template for Active Directory Appendix: Authentication Modules for Logging into the One Identity Manager

Assigning Active Directory User Accounts directly to an Active Directory Group

Assigning Active Directory User Accounts directly to an Active Directory Group

Groups can be assigned directly or indirectly to user accounts. Indirect assignment is carried out by allocating the employee and groups in company structures, like departments, cost centers, locations or business roles. If the employee has a user account in Active Directory, the groups in the role are inherited by this user account.

To react quickly to special requests, you can assign groups directly to user accounts.

To assign a group directly to user accounts

  1. Select the category Active Directory | Groups.
  2. Select the group in the result list.
  3. Select Assign user accounts in the task view.
  4. Assign user accounts in Add assignments.

    The view- OR -

    Remove user accounts from Remove assignments.

  5. Save the changes.

NOTE: The user account's primary group is already assigned and labeled as "Not yet applied". Edit the user account's master data to change its primary group.
Related Topics

Assigning Active Directory Contacts Directly to an Active Directory Group

Assigning Active Directory Contacts Directly to an Active Directory Group

Groups can be assigned directly or indirectly to a contact. Indirect assignment is carried out by allocating the employee and groups in company structures, like departments, cost centers, locations or business roles. If the employee has a contact in the Active Directory, the groups in the role are inherited by this contact.

To react quickly to special requests, you can assign groups directly to contacts.

To assign a group directly to contacts

  1. Select the category Active Directory | Groups.
  2. Select the group in the result list.
  3. Select Assign contacts in the task view.
  4. Assign contacts in Add assignments.

    - OR -

    Remove the contacts in Remove assignments.

  5. Save the changes.
Related Topics

Assigning Active Directory Computers Directly to an Active Directory Group

Assigning Active Directory Computers Directly to an Active Directory Group

Groups can be assigned directly or indirectly to a computer. Indirect assignment is carried out by allocating the device with which a computer is connected and groups to company structures, like departments, cost centers, locations or business roles.

To react quickly to special requests, you can assign groups directly to computers.

To assign a group directly to computers

  1. Select the category Active Directory | Groups.
  2. Select the group in the result list.
  3. Select the Assign computers in the task view.
  4. Assign computers in Add assignments.

    - OR -

    Remove the computers in Remove assignments.

  5. Save the changes.

NOTE: The computer's primary group is already assigned and labeled as "Not yet applied". Edit the computer's master data to change its primary group.

Related Topics

Adding Active Directory Groups to System Roles

Adding Active Directory Groups to System Roles

Installed Modules: System Roles Module

Use this task to add a group to system roles. If you assign a system role to employees, all the employees' user accounts inherit the group.

NOTE: Groups with the option Only use in IT Shop can only be assigned to system roles that also have this option set. For more detailed information, see the One Identity Manager System Roles Administration Guide.

To assign a group to system roles

  1. Select the category Active Directory | Groups.
  2. Select the group in the result list.
  3. Select Assign system roles in the task view.
  4. Assign system roles in Add assignments.

    - OR -

    Remove system roles from Remove assignments.

  5. Save the changes.
Related Topics
Related Documents