General Master Data for a Azure Active Directory Tenant

General Master Data for a Azure Active Directory Tenant

Enter the following data on the General tab:

Table 22: Tenant Master Data

Property	Description
Display name	The tenant’s display name.
Account definition (initial)	Initial account definition for creating user accounts. This account definition is used if automatic assignment of employees to user accounts is used for this tenant and user accounts should be created which are already managed (state "linked configured"). The account definition's default manage level is applied. User accounts are only linked to the employee (state "Linked") if no account definition is given. This is the case on initial synchronization, for example.
Target SystemAn instance of a target system in which the employees managed by One Identity Manager have access to network resources. Example: An Active Directory domain X for target system type "Active Directory", a directory Y for target system type "LDAP", a client Z for target system type "SAP R/3". Managers	Application role in which target system managers are specified for the tenant. Target system managers only edit tenant objects that are assigned to them. Each tenant can have a different target system manager assigned to it. Select the One Identity Manager application role whose members are responsible for administration of this tenant. Use the button to add a new application role.
Location	The tenant's location.
Street	Street or road.
Town	City.
Zip code	Zip code.
Country	Country.
Synchronized by	NOTE: You can only specify the synchronization type when adding a new tenant. No changes can be made after saving. Use "One Identity Manager" when you create a tenant with the Synchronization EditorOne Identity Manager tool for configuring target system synchronization.. Type of synchronization through which the data is synchronized between the tenant and One Identity Manager. Table 23: Permitted Values Value SynchronizationThe process of comparing data between One Identity Manager and a target system. Objects and their properties are compared by fixed rules. Synchronization results in the identical data situation in the target system and One Identity Manager database. by Provisioned by One Identity Manager Azure Active Directory connector Azure Active Directory connector No synchronization none none NOTE: If you select "No synchronization" you can define custom processes to exchange data between One Identity Manager and the target system.
Recipients (marketing notifications)	List of recipients of marketing notifications.
Recipient (technical notifications)	List of recipients of technical notifications.
Recipients (security notifications)	List of recipients of security notifications.
Phone numbers (security notifications)	Phone numbers for security notifications.

Related Topics

• Automatic Assignment of Employees to Azure Active Directory User Accounts
• Target System Managers

Local Active Directory Data

Local Active Directory Data

The Linked tab shows information about the local Active Directory, which is linked to the Azure Active Directory tenant.

Specifying Categories for Inheriting Permissions

In One Identity Manager, groups, administrative roles, subscriptions and disabled service plans can be selectively inherited by user accounts. For this, groups(administrative roles, subscriptions and disabled service plans) and user accounts are divided into categories. The categories can be freely selected and are specified by a template. Each category is given a specific position within the template. The mapping rule contains different tables. Use the user account table to specify categories for target system dependent user accounts. Enter your categories for the structural profiles, administrative roles, subscriptions and disabled service plans in the other tables. Each table contains the category items "Position1" to "Position31".

To define a category

1. Select the category Azure Active Directory | Tenants.
2. Select the tenant from the result list.
3. Select Change master data in the task view.
4. Switch to the MappingList of object matching rules and property mapping rules which map the schema properties of two connected systems to one another. rule category tab.
5. Expand the respective base node of a table.
6. Click to enable category.
7. Enter a name for the user account and group categories (administration roles, subscriptions, disabled service plans) in the current language.
8. Save the changes.

Related Topics

• Azure Active Directory Group Inheritance Based on Categories
• Azure Active Directory Administrator Role Inheritance Based on Categories
• Inheriting Azure Active Directory Subscriptions based on Categories
• Inheritance of Disabled Azure Active Directory Service Plans Based on Categories

How to Edit a Synchronization Project

How to Edit a Synchronization Project

SynchronizationThe process of comparing data between One Identity Manager and a target system. Objects and their properties are compared by fixed rules. Synchronization results in the identical data situation in the target system and One Identity Manager database. projects, in which a tenant is already used as a base object, can also be opened using the Manager. You can, for example, check the configuration or view the synchronization log in this mode. The Synchronization EditorOne Identity Manager tool for configuring target system synchronization. is not started with its full functionality. You cannot run certain functions, such as, running synchronization or simulation, starting the target system browser and others.

To open an existing synchronization project in the Synchronization Editor

1. Select the category Azure Active Directory | Tenants.
2. Select the tenant from the result list. Select Change master data in the task view.
3. Select Edit synchronization project... from the task view.

Related Topics

• Customizing Synchronization Configuration