Assigning Azure Active Directory Subscriptions to Business Roles

Assigning Azure Active Directory Subscriptions to Business Roles

Assign subscriptions to business roles to assign them to user accounts over these business roles.

To assign a subscription to business roles (non role-based login)

1. Select the category Azure Active Directory | Subscriptions.
2. Select a subscription in the result list.
3. Select Assign business roles in the task view.

4. Assign business roles in Add assignments.

   - OR -

   Remove business roles from Remove assignments.

5. Save the changes.

To assign subscriptions to a business role (role-based login)

1. Select the category Business roles | <Role class>.
2. Select the business role in the result list.
3. Select Assign Azure Active Directory subscriptions in the task view.
4. Assign the subscriptions in Add assignments.

   - OR -

   Remove the subscriptions in Remove assignments.

5. Save the changes.

Related Topics

• Assigning Azure Active Directory Subscriptions to Departments, Cost Centers and Locations
• Assigning Azure Active Directory User Accounts directly to an Azure Active Directory Subscription
• Adding Azure Active Directory Subscriptions to System Roles
• Adding Azure Active Directory Subscriptions to the IT Shop
• One Identity Manager Users for Managing an Azure Active Directory System

Assigning Azure Active Directory User Accounts directly to an Azure Active Directory Subscription

Assigning Azure Active Directory User Accounts directly to an Azure Active Directory Subscription

You can assign subscriptions directly or indirectly to a user account. In the case of indirect assignment, employees and subscriptions are assigned to hierarchical roles, such as, departments, cost centers, locations or business roles. If the employee has a user account in Azure Active Directory, role subscriptions are inherited by this user account.

To react quickly to special requests, you can assign subscriptions directly to a user account.

To assign a subscription directly to user accounts

1. Select the category Azure Active Directory | Subscriptions.
2. Select a subscription in the result list.
3. Select Assign user accounts in the task view.

4. Assign user accounts in Add assignments.

   The view- OR -

   Remove user accounts from Remove assignments.

5. Save the changes.

Related Topics

• Assigning Azure Active Directory Subscriptions directly to Azure Active Directory User Accounts
• Assigning Azure Active Directory Subscriptions to Departments, Cost Centers and Locations
• Assigning Azure Active Directory Subscriptions to Business Roles
• Adding Azure Active Directory Subscriptions to System Roles
• Adding Azure Active Directory Subscriptions to the IT Shop

Adding Azure Active Directory Subscriptions to System Roles

Adding Azure Active Directory Subscriptions to System Roles

Use this task to add a subscription to system roles. When you assign a system role to an employee, the subscription is inherited by all user accounts owned by these employees.

To assign a subscription to a system role

1. Select the category Azure Active Directory | Subscriptions.
2. Select a subscription in the result list.
3. Select Assign system roles in the task view.

4. Assign system roles in Add assignments.

   - OR -

   Remove system roles from Remove assignments.

5. Save the changes.

Related Topics

• Assigning Azure Active Directory Subscriptions to Departments, Cost Centers and Locations
• Assigning Azure Active Directory Subscriptions to Business Roles
• Assigning Azure Active Directory User Accounts directly to an Azure Active Directory Subscription
• Adding Azure Active Directory Subscriptions to the IT Shop

Adding Azure Active Directory Subscriptions to the IT Shop

Adding Azure Active Directory Subscriptions to the IT Shop

Once a subscription is assigned to an IT Shop shelf, it can be requested by customers. To ensure it can be requested, further prerequisites need to be guaranteed.

• The subscription must be labeled with the IT Shop option.
• The subscription must be assigned to a service item.
• If the subscription is only supposed to be available to employees through IT Shop requests, the subscription must also be labeled with the option Only for use in IT Shop. Direct assignment to hierarchical roles may not be possible.

To add a subscription in the IT Shop

1. Select the category Azure Active Directory | Subscriptions (non role-based login).

   - OR -

   Select the category Entitlements | Azure Active Directory subscriptions (role-based subscription).

2. Select a subscription in the result list.
3. Select Add to IT Shop in the task view.
4. Assign the subscription to the IT Shop in Add assignments.
5. Save the changes.

To remove a subscription from individual IT Shop shelves

1. Select the category Azure Active Directory | Subscriptions (non role-based login).

   - OR -

   Select the category Entitlements | Azure Active Directory subscriptions (role-based subscription).

2. Select a subscription in the result list.
3. Select Add to IT Shop in the task view.
4. Remove the subscription from the IT Shop shelves in Remove assignments.
5. Save the changes.

To remove a subscription from all IT Shop shelves

1. Select the category Azure Active Directory | Subscriptions (non role-based login).

   - OR -

   Select the category Entitlements | Azure Active Directory subscriptions (role-based subscription).

2. Select a subscription in the result list.
3. Select Remove from all shelves (IT Shop) in the task view.
4. Confirm the security prompt with Yes.
5. Click OK.

   The subscription is removed from all shelves by the One Identity Manager Service. All request and assignment requests for this subscription are canceled in the process.

For more detailed information about request from company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related Topics

• Editing Azure Active Directory Subscription Master Data
• Assigning Azure Active Directory Subscriptions to Departments, Cost Centers and Locations
• Assigning Azure Active Directory Subscriptions to Business Roles
• Assigning Azure Active Directory User Accounts directly to an Azure Active Directory Subscription
• Adding Azure Active Directory Subscriptions to System Roles