Groups in a Custom Target System

Groups in a Custom Target System

Groups map the objects that control access to target system resources in the target systems. A user receives access to target system resources through group memberships and access permissions.

To edit group master data

1. Select the category Custom target systems | <target system> | Groups.
2. Select the group in the result list and run Change master data in the task view.

   - OR -

   Click in the result list toolbar.

3. Edit a group's master data.
4. Save the changes.

Detailed information about this topic

• Group Master Data

Group Master Data

Group Master Data

Enter the following master data for a group.

Related Topics

• Group Inheritance Based on Categories
• For more detailed information about preparing groups for requesting through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Assigning Group to User Accounts

Assigning Group to User Accounts

Groups can be assigned directly or indirectly to user accounts. In the case of indirect assignment, employees and groups are assigned to hierarchical roles, such as , departments, cost centers, locations or business roles. The groups assigned to an employee are calculated from the position in the hierarchy and the direction of inheritance.

If you add an employee to roles and that employee owns a user account in a target system, the user account is added to the group. Prerequisites for indirect assignment of employees to user accounts:

• Direct assignment of employees and groups of custom target systems is permitted for role classes (department, cost center, location or business role).
• The user accounts are marked with the option Groups can be inherited.

Furthermore, groups can be assigned to employees through IT Shop requests. Add employees to a shop as customers so that groups can be assigned through IT Shop requests. All groups are assigned to this shop can be requested by the customers. Requested groups are assigned to the employees after approval is granted.

For more detailed information about inheriting company resources, see the One Identity Manager Identity Management Base Module Administration Guide.

Related Topics

• Target system types

Assigning Groups to Departments, Cost Centers and Locations

Assigning Groups to Departments, Cost Centers and Locations

Assign a group to departments, cost centers or locations so that the group can be inherited by user accounts through these organizations.

To assign a group to departments, cost centers or locations (non role-based login)

1. Select the category Custom target systems | <target system> | Groups.
2. Select the group in the result list.
3. Select Assign organizations.

4. Assign organizations in Add assignments.

   • Assign departments on the Departments tab.
   • Assign locations on the Locations tab.
   • Assign cost centers on the Cost center tab.

   - OR -

   Remove the organizations from Remove assignments.

5. Save the changes.

To assign groups to a department, cost center or location (role-based login)

1. Select the category Organizations | Departments.

   - OR -

   Select the category Organizations | Cost centers.

   - OR -

   Select the category Organizations | Locations.

2. Select the department, cost center or location in the result list.
3. Select Assign custom target system groups.
4. Assign groups in Add assignments.

   - OR -

   Remove assignments to groups in Remove assignments.

5. Save the changes.