Information about subscriptions and service plans within a tenant is loaded into One Identity Manager during synchronization. You cannot create new subscriptions and service plans in the One Identity Manager. You can edit individual properties of the subscription for requesting in the IT Shop and assigning to user accounts in the One Identity Manager.
To edit subscription master data
Property |
Description |
---|---|
SKU display name |
The SKU display name for the subscription, for example "AAD_Premium" or "RMSBASIC". |
Tenant |
Tenant entered for this subscription. |
Subscription status | The subscription status, for example, "Enabled". |
Purchased licenses | The number of licenses purchased. |
Assigned licenses | Number of actively used licenses. |
Suspended licenses | Number of suspended licenses. |
Warning units |
Number of licenses with in a warning status. |
IT Shop |
Specifies whether the subscription can be requested through the IT Shop. This subscription can be requested by staff through the Web Portal and granted through a defined approval procedure. The subscription can still be assigned directly to user accounts and hierarchical roles. |
Only for use in IT Shop |
Specifies whether the subscription can only be requested through the IT Shop. This subscription can be requested by staff through the Web Portal and granted through a defined approval procedure. The subscription may not be assigned directly to hierarchical roles. |
Service item |
Service item data for requesting the subscription through the IT Shop. |
Risk index |
Value for evaluating the risk of assigning the subscription to user accounts. Enter a value between 0 and 1. This property is only visible if the configuration parameter "QER\CalculateRiskIndex" is set. For more detailed information about risk assessment, see the One Identity Manager Risk Assessment Administration Guide. |
Category |
Category for subscription inheritance. Subscriptions can be selectively inherited by user accounts. To do this, subscriptions and user accounts are divided into categories. Use this menu to allocate one or more categories to the subscription. |
You can assign subscriptions directly or indirectly to a user account. In the case of indirect assignment, employees and subscriptions are assigned to hierarchical roles, such as, departments, cost centers, locations or business roles. Subscriptions assigned to an employee are calculated from the position in the hierarchy and the direction of inheritance.
If the employee has a user account in Azure Active Directory, role subscriptions are inherited by this user account.
Prerequisites for indirect assignment of employees to user accounts:
Furthermore, subscriptions can be assIT Shopigned to employees through requests. Add employees to a shop as customers so that subscriptions can be assigned through IT Shop requests. All subscriptions assigned to this shop can be requested by the customers. Requested subscriptions are assigned to the employees after approval is granted.
|
TIP: You can combine the account definition for creating the user account and the subscription that will be used into one system role. in this way, the employee automatically obtains a user account and a subscription. An employee can obtain this system role directly, through departments, cost centers, location or business roles or by IT Shop request. |
Assign subscriptions to departments, cost centers and locations in order to assign user accounts to them through these organizations.
To assign a subscription to departments, cost centers or locations (non role-based login)
Assign organizations in Add assignments.
- OR -
Remove the organizations from Remove assignments.
To assign subscriptions to a department, cost center or location (role-based login)
- OR -
Select the category Organizations | Cost centers.
- OR -
Select the category Organizations | Locations.
- OR -
Remove the subscriptions in Remove assignments.
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy