Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for Connecting to Azure Active Directory

Managing Azure Active Directory Environments Setting Up Synchronization with an Azure Active Directory Tenant Base Data for Managing Azure Active Directory Azure Active Directory Core Directories Azure Active Directory user accounts Azure Active Directory groups Azure Active Directory Administrator Roles Azure Active Directory Subscriptions and Service Plans
Azure Active Directory Subscriptions Disabled Azure Active Directory Service Plan
Reports about Azure Active Directory Objects Appendix: Configuration Parameters for Managing Azure Active Directory Appendix: Default Project Template for Azure Active Directory

Azure Active Directory Subscriptions

Azure Active Directory Subscriptions

Information about subscriptions and service plans within a tenant is loaded into One Identity Manager during synchronization. You cannot create new subscriptions and service plans in the One Identity Manager. You can edit individual properties of the subscription for requesting in the IT Shop and assigning to user accounts in the One Identity Manager.

Editing Azure Active Directory Subscription Master Data

Editing Azure Active Directory Subscription Master Data

To edit subscription master data

  1. Select the category Azure Active Directory | Subscriptions.
  2. Select a subscription in the result list.
  3. Select Change master data in the task view.
  4. Edit the subscription's master data.
  5. Save the changes.
Table 45: Subscription Master Data

Property

Description

SKU display name

The SKU display name for the subscription, for example "AAD_Premium" or "RMSBASIC".

Tenant

Tenant entered for this subscription.

Subscription status The subscription status, for example, "Enabled".
Purchased licenses The number of licenses purchased.
Assigned licenses Number of actively used licenses.
Suspended licenses Number of suspended licenses.

Warning units

Number of licenses with in a warning status.

IT Shop

Specifies whether the subscription can be requested through the IT Shop. This subscription can be requested by staff through the Web Portal and granted through a defined approval procedure. The subscription can still be assigned directly to user accounts and hierarchical roles.

Only for use in IT Shop

Specifies whether the subscription can only be requested through the IT Shop. This subscription can be requested by staff through the Web Portal and granted through a defined approval procedure. The subscription may not be assigned directly to hierarchical roles.

Service item

Service item data for requesting the subscription through the IT Shop.

Risk index

Value for evaluating the risk of assigning the subscription to user accounts. Enter a value between 0 and 1. This property is only visible if the configuration parameter "QER\CalculateRiskIndex" is set.

For more detailed information about risk assessment, see the One Identity Manager Risk Assessment Administration Guide.

Category

 Category for subscription inheritance. Subscriptions can be selectively inherited by user accounts. To do this, subscriptions and user accounts are divided into categories. Use this menu to allocate one or more categories to the subscription.
Related Topics

Assigning Azure Active Directory Subscriptions to Azure Active Directory User Accounts

Assigning Azure Active Directory Subscriptions to Azure Active Directory User Accounts

You can assign subscriptions directly or indirectly to a user account. In the case of indirect assignment, employees and subscriptions are assigned to hierarchical roles, such as, departments, cost centers, locations or business roles. Subscriptions assigned to an employee are calculated from the position in the hierarchy and the direction of inheritance.

If the employee has a user account in Azure Active Directory, role subscriptions are inherited by this user account.

Prerequisites for indirect assignment of employees to user accounts:

  • Assignment of employees and subscriptions is permitted for role classes (department, cost center, location or business role).
  • The user accounts are marked with the option Groups can be inherited.

Furthermore, subscriptions can be assIT Shopigned to employees through requests. Add employees to a shop as customers so that subscriptions can be assigned through IT Shop requests. All subscriptions assigned to this shop can be requested by the customers. Requested subscriptions are assigned to the employees after approval is granted.

TIP: You can combine the account definition for creating the user account and the subscription that will be used into one system role. in this way, the employee automatically obtains a user account and a subscription.

An employee can obtain this system role directly, through departments, cost centers, location or business roles or by IT Shop request.

Detailed information about this topic

Assigning Azure Active Directory Subscriptions to Departments, Cost Centers and Locations

Assigning Azure Active Directory Subscriptions to Departments, Cost Centers and Locations

Assign subscriptions to departments, cost centers and locations in order to assign user accounts to them through these organizations.

To assign a subscription to departments, cost centers or locations (non role-based login)

  1. Select the category Azure Active Directory | Subscriptions.
  2. Select a subscription in the result list.
  3. Select Assign organizations.

  4. Assign organizations in Add assignments.

    • Assign departments on the Departments tab.
    • Assign locations on the Locations tab.
    • Assign cost centers on the Cost center tab.

    - OR -

    Remove the organizations from Remove assignments.

  5. Save the changes.

To assign subscriptions to a department, cost center or location (role-based login)

  1. Select the category Organizations | Departments.

    - OR -

    Select the category Organizations | Cost centers.

    - OR -

    Select the category Organizations | Locations.

  2. Select the department, cost center or location in the result list.
  3. Select Assign Azure Active Directory subscriptions in the task view.
  4. Assign the subscriptions in Add assignments.

    - OR -

    Remove the subscriptions in Remove assignments.

  5. Save the changes.
Related Topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating