Assigning Additional Properties to an Azure Active Directory Subscription

Assigning Additional Properties to an Azure Active Directory Subscription

Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.

To specify extended properties for a subscription

1. Select the category Azure Active Directory | Subscriptions.
2. Select a subscription in the result list.
3. Select Assign extended properties in the task view.

4. Assign extended properties in Add assignments.

   The view- OR -

   Remove extended properties from Remove assignments.

5. Save the changes.

For more detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

Disabled Azure Active Directory Service Plan

Disabled Azure Active Directory Service Plan

So called "disabled service plans" are mapped in the One Identity Manager to prevent users from using single service plans. Disabled service plans are created automatically after synchronizing the subscription in the One Identity Manager. Disabled service plans are requested through the IT Shop or assigned to users through departments, cost centers, locations, business roles or system roles.

Editing Master Data of Disabled Azure Active Directory Service Plans

Editing Master Data of Disabled Azure Active Directory Service Plans

To edit disabled service plan master data

1. Select the category Azure Active Directory | Disabled service plans.
2. Select the service plan in the result list.
3. Select Change master data in the task view.
4. Edit the service plan’s master data.
5. Save the changes.

Related Topics

• Azure Active Directory Group Inheritance Based on Categories
• For more detailed information about preparing disabled service plans for requesting through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Assigning Disabled Azure Active Directory Service Plans to Azure Active Directory User Accounts

Assigning Disabled Azure Active Directory Service Plans to Azure Active Directory User Accounts

You can assign disabled service plans directly or indirectly to a user account. In the case of indirect assignment, employees and disabled service plans are assigned to hierarchical roles, such as, departments, cost centers, locations or business roles. The disabled service plans assigned to an employee are calculated from the position in the hierarchy and the direction of inheritance.

If the employee has a user account in Azure Active Directory, disabled service plans belonging to roles are inherited by this user account.

Prerequisites for indirect assignment of employees to user accounts:

• Assignment of employees and disabled service plans is permitted for role classes (department, cost center, location or business role).
• The user accounts are marked with the option Groups can be inherited.

Furthermore, disabled service plans can be assigned to employees through IT Shop requests. Add employees to a shop as customers so that disabled service plans can be assigned through IT Shop requests. All disabled service plans are assigned to this shop can be requested by the customers. Requested disabled service plans are assigned to the employees after approval is granted.

Detailed information about this topic

• Assigning Disabled Azure Active Directory Service Plans to Departments, Cost Centers and Locations
• Assigning Disabled Azure Active Directory Service Plans to Business Roles
• Assigning Azure Active Directory User Accounts directly to Azure Active Directory Service Plans
• Adding Disabled Azure Active Directory Service Plans to System Roles
• Adding Disabled Azure Active Directory Service Plans to the IT Shop