Assigning Groups to Business Roles

Assigning Groups to Business Roles

Assign the group to business roles so that the group is inherited by user accounts through these business roles.

To assign a group to a business role (non role-based login)

1. Select the category Custom target systems | <target system> | Groups.
2. Select the group in the result list.
3. Select Assign business roles in the task view.

4. Assign business roles in Add assignments.

   - OR -

   Remove business roles from Remove assignments.

5. Save the changes.

To assign groups to a business role (non role-based login)

1. Select the category Business roles | <Role class>.
2. Select the business role in the result list.
3. Select Assign custom target system groups.
4. Assign groups in Add assignments.

   - OR -

   Remove assignments to groups in Remove assignments.

5. Save the changes.

Assigning User Accounts to a Group

Assigning User Accounts to a Group

Groups can be assigned directly or indirectly to a user account. Indirect assignment is carried out by allocating the employee and groups in hierarchical roles, like departments, cost centers, locations or business roles. If the employee has a user account in the target system, the groups in the role are inherited by this user account. You can assign groups to user accounts, which belong to the same target system or target system type.

To react quickly to special requests, you can assign groups directly to user accounts.

To assign a group directly to user accounts

1. Select the category Custom target systems | <target system> | Groups.
2. Select the group in the result list.
3. Select Assign user accounts in the task view.

4. Assign user accounts in Add assignments.

   The view- OR -

   Remove user accounts from Remove assignments.

5. Save the changes.

Add Groups to System Roles

Add Groups to System Roles

Use this task to add a group to system roles. If you assign a system role to employees, all the employees' user accounts inherit the group.

To assign a group to system roles

1. Select the category Custom target systems | <target system> | Groups.
2. Select the group in the result list.
3. Select Assign system roles in the task view.

4. Assign system roles in Add assignments.

   - OR -

   Remove system roles from Remove assignments.

5. Save the changes.

Adding Groups to the IT Shop

Adding Groups to the IT Shop

Once a group has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed.

• The group must be labeled with the option IT Shop.
• The group must be assigned to a service item.
• The group must be labeled with the option Only use in IT Shop if the group can only be assigned to employees through IT Shop requests. Direct assignment to hierarchical roles may not be possible.

To add a group to the IT Shop

1. Select the category Custom Target Systems | <target system> | Groups (non role-based login).

   - OR -

   Select the category Entitlements | Groups (role-based login).

2. Select the group in the result list.
3. Select Add to IT Shop in the task view.
4. Assign the group to the IT Shop shelves in Add assignments.
5. Save the changes.

To remove a group from individual IT Shop shelves.

1. Select the category Custom Target Systems | <target system> | Groups (non role-based login).

   - OR -

   Select the category Entitlements | Groups (role-based login).

2. Select the group in the result list.
3. Select Add to IT Shop in the task view.
4. Remove the group from the IT Shop shelves in Remove assignments.
5. Save the changes.

To remove a group from all IT Shop shelves.

1. Select the category Custom Target Systems | <target system> | Groups (non role-based login).

   - OR -

   Select the category Entitlements | Groups (role-based login).

2. Select the group in the result list.
3. Select Remove from all shelves (IT Shop) in the task view.
4. Confirm the security prompt with Yes.
5. Click OK.

   This removes the group from all One Identity Manager Service shelves. All requests and assignment requests with this group are canceled in the process.

For more detailed information about request from company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related Topics

• Group Master Data