Azure Active Directory Administrator Roles Overview

Azure Active Directory Administrator Roles Overview

Use this task to obtain an overview of the most important information about an administrator role.

To obtain an overview of a administration role

1. Select the category Azure Active Directory | Administrator roles.
2. Select the administrator role in the result list.
3. Select the task Azure Active Directory administrator role overview.

Azure Active Directory Administrator Role Inheritance Based on Categories

Azure Active Directory Administrator Role Inheritance Based on Categories

You can also apply the behavior described under Azure Active Directory Group Inheritance Based on Categories for administration roles.

To use inheritance through categories

• Define the categories in the tenant.
• Assign categories to user accounts through their master data.
• Assign categories to administrator roles through their master data.

Related Topics

• Specifying Categories for Inheriting Permissions
• General Master Data for a Azure Active Directory User Account
• Editing Azure Active Directory Administrator Role Master Data

Assigning Extended Properties to an Azure Active Directory Administrator Role

Assigning Extended Properties to an Azure Active Directory Administrator Role

Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.

To specify extended properties for an administrator role

1. Select the category Azure Active Directory | Administrator roles.
2. Select the administrator role in the result list.
3. Select Assign extended properties in the task view.

4. Assign extended properties in Add assignments.

   The view- OR -

   Remove extended properties from Remove assignments.

5. Save the changes.

For more detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

Azure Active Directory Subscriptions and Service Plans

Azure Active Directory Subscriptions and Service Plans

Users require a subscription to access a service plan in Azure Active Directory. Users obtain all the service plans that are linked to a subscription. By assigning subscriptions directly to users, you make the subscriptions available to them. You can assign subscriptions to departments, cost centers, locations, business roles or the IT Shop.

So called "disabled service plans" are mapped in the One Identity Manager to prevent users from using single service plans. Disabled service plans are created automatically after synchronizing the subscription in the One Identity Manager. Disabled service plans are requested through the IT Shop or assigned to users through departments, cost centers, locations, business roles or system roles.

The actual service plans available to the user in Azure Active Directory result from the user's subscription and the service plans associated with it and the assignment of disabled service plans.