Group Inheritance Based on Categories

In One Identity Manager, groups can be selectively inherited by user accounts. For this, groups and user accounts are divided into categories. The categories can be freely selected and are specified by a template. Each category is given a specific position within the template. The template contains two tables; the user account table and the group table. Use the user account table to specify categories for target system dependent user accounts. Enter your categories for the target system dependent groups, administrative roles, subscriptions and disabled service plans in the . Each table contains the category items "Position1" to "Position31".

Every user account can be assigned to one or more categories. Each group can also be assigned to one or more categories. The group is inherited by the user account when at least one user account category item matches an assigned group. The group is also inherited by the user account if the group or the user account is not put into categories.

Figure 1: Example of inheriting through categories.

To use inheritance through categories

• Define categories in the target system.
• Assign categories to user accounts through their master data.
• Assign categories to groups through their master data.

Related Topics

• Specifying Categories for Inheriting Groups
• User Account Master Data
• Group Master Data

Assigning Extended Properties

Assigning Extended Properties

Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.

To specify extended properties for a group

1. Select the category Custom target systems | <target system> | Groups.
2. Select the group in the result list.
3. Select Assign extended properties in the task view.

4. Assign extended properties in Add assignments.

   The view- OR -

   Remove extended properties from Remove assignments.

5. Save the changes.

For more detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

Assigning Permissions Controls

Assigning Permissions Controls

Use this task to assign permissions controls to groups.

To assign permissions controls to a group

1. Select the category Custom target systems | <target system> | Groups.
2. Select the group in the result list.
3. Select Assign permissions controls.
4. Double-click on the permission controls you want to assign in Add assignments.

   - OR -

   Double-click on the permissions controls in Remove assignments to remove their assignments.

5. Save the changes.

Related Topics

• Entering Permissions Controls

Entering Permissions Controls

Entering Permissions Controls

Use permissions controls to map more properties of the target systems. To do this, you can import the data you want into the One Identity Manager from the connected target system. You can also add permissions controls in the One Identity Manager.

To edit permissions controls

1. Select the category Custom target systems | <target system> | Permissions controls.
2. Select a permissions control in the result list. Select Change master data in the task view.

   - OR -

   Click in the result list toolbar.

3. Edit the permissions controls' master data.
4. Save the changes.

Detailed information about this topic

• Permissions Control Master Data