Identity Manager 8.0.2 - Administration Guide for Connecting to SharePoint Online

Managing SharePoint Online Environments Setting up SharePoint Online Synchronization Base Data for Managing SharePoint Online Appendix: Configuration Parameters for Managing SharePoint Online Appendix: Default Project Template for SharePoint Online Appendix: Editing System Objects

Managing SharePoint Online Environments

Management of SharePoint Online with the One Identity Manager concentrates on mapping site collections, sites and groups in a cloud environment.

The system information for the SharePoint Online structure is loaded into the One Identity Manager database during data synchronization. It is only possible to customize certain system information in One Identity Manager due to the complex dependencies and far reaching effects of changes.

For more detailed information about the SharePoint Online structure, see the SharePoint Online documentation from Microsoft.

Related Topics

Architecture Overview

To access SharePoint Online organizational data, the SharePoint Online connector is installed on a synchronization server. The synchronization server ensures data is compared between the One Identity Manager database and SharePoint Online. The SharePoint Online connector is part of the SharePoint Online Module and responsible for communicating with the Microsoft Office 365 subscriptions of SharePoint Online in the cloud. The Microsoft CSOM (Client-side object model) is used for accessing the SharePoint Online data.

To access the data in a SharePoint Online organization, the Azure Active Directory target system containing the organization must be synchronized.

Figure 1: Architecture for synchronization

One Identity Manager Users for Managing a SharePoint Online System

The following users are used for setting up and administration of a SharePoint Online system.

Table 1: Users
User Task
Target system administrators

Target system administrators must be assigned to the application role Target system | Administrators.

Users with this application role:

  • Administrate application roles for individual target systems types.
  • Specify the target system manager.
  • Set up other application roles for target system managers if required.
  • Specify which application roles are conflicting for target system managers
  • Authorize other employee to be target system administrators.
  • Do not assume any administrative tasks within the target system.
Target System Managers

Target system managers must be assigned to the application role Target systems | SharePoint Online or a sub application role.

Users with this application role:

  • Assume administrative tasks for the target system.
  • Create, change or delete target system objects, like user accounts or groups.
  • Edit password policies for the target system.
  • Prepare for adding to the IT Shop.
  • Configure synchronization in the Synchronization Editor and defines the mapping for comparing target systems and One Identity Manager.
  • Edit the synchronization's target system types and outstanding objects.
  • Authorize other employees within their area of responsibility as target system managers and create child application roles if required.
One Identity Manager administrator
  • Create customized permissions groups for application roles for role-based login to administration tools in the Designer, as required.
  • Create system users and permissions groups for non-role based login to administration tools, as required.
  • Enable or disable additional configuration parameters in the Designer, as required.
  • Create custom processes in the Designer, as required.
  • Create and configures schedules, as required.
  • Create and configure password policies, as required.

Setting up SharePoint Online Synchronization

One Identity Manager supports synchronization with SharePoint Online.

One Identity Manager is responsible for synchronizing data between the SharePoint Online database and the One Identity Manager Service. Synchronization prerequisites are:

  • Regular synchronization with the Azure Active Directory system
  • The Azure Active Directory tenant is declared in One Identity Manager.
  • Administrators for the site collections to be managed are set correctly in the synchronization project.

To load SharePoint Online objects into the One Identity Manager database

  1. Prepare a user account in the Azure Active Directory tenant with sufficient permissions for synchronization.

  2. The One Identity Manager components for managing SharePoint Online systems are available if the configuration parameter "TargetSystem\SharePoint Online" is set.

    • Check whether the configuration parameter is set in the Designer. Otherwise, set the configuration parameter and compile the database.

    • Other configuration parameters are installed when the module is installed. Check the configuration parameters and modify them as necessary to suit your requirements.
  3. Install and configure a synchronization server and declare the server as Job server in One Identity Manager.
  4. Create a synchronization project with the Synchronization Editor.
Detailed information about this topic
Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents