The default manage level is applied if you create user accounts using automatic employee assignment. You can change a user account manage level later.
To change the manage level for a user account
Groups can be assigned directly or indirectly to a user account. Indirect assignment is carried out by allocating the employee and groups in hierarchical roles, like departments, cost centers, locations or business roles. If the employee has a user account in the target system, the groups in the role are inherited by this user account. You can assign groups to user accounts, which belong to the same target system or target system type.
To react quickly to special requests, you can assign groups directly to the user account.
To assign groups directly to user accounts
Assign groups in Add assignments.
The view- OR -
Remove groups from Remove assignments.
Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.
To specify extended properties for a user account
- OR -
Remove assignments to extended properties in Remove assignments.
For more detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.
Use this task to assign permissions controls directly to user accounts.
To assign permissions controls to a user account
Assign permissions controls in Add assignments.
- OR -
Remove permissions controls from Remove assignments.