Specifying Server Functions

Specifying Server Functions

The server function defines the functionality of a server in One Identity Manager. One Identity Manager processes are handled depending on the server function.

Related Topics

• Master Data for a Job Server

Target System Managers

Target System Managers

For more detailed information about implementing and editing application roles, see the One Identity Manager Application Roles Administration Guide.

Implementing Application Roles for Target System Managers

1. The One Identity Manager administrator assigns employees to be target system managers.
2. These target system managers add employees to the default application role for target system managers.

   The default application role target system managers are entitled to edit all customers in One Identity Manager.

3. Target system managers can authorize more employees as target system managers, within their scope of responsibilities and create other child application roles and assign individual customers.

To initially specify employees to be target system administrators

1. Log in to the Manager as One Identity Manager administrator (application role Base role | Administrators)
2. Select the category One Identity Manager Administration | Target systems | Administrators.
3. Select Assign employees in the task view.
4. Assign the employee you want and save the changes.

To add the first employees to the default application as target system managers.

1. Log yourself into the Manager as target system administrator (application role Target systems | Administrator).
2. Select the category One Identity Manager Administration | Target systems | G Suite.
3. Select Assign employees in the task view.
4. Assign the employees you want and save the changes.

To authorize other employees as target system managers when you are a target system manager

1. Login to the Manager as target system manager.
2. Select the application role in the category G Suite | Basic configuration data | Target system managers.
3. Select Assign employees in the task view.
4. Assign the employees you want and save the changes.

To define target system managers for individual customers.

1. Login to the Manager as target system manager.
2. Select the category G Suite | Customers.
3. Select the customer in the result list.
4. Select Change master data in the task view.
5. Select the application role on the General tab in the Target system manager menu.

   - OR -

   Click next to the Target system manager menu to create a new application role.

   • Enter the application role name and assign the parent application role Target system | G Suite.
   • Click OK to add the new application role.
6. Save the changes.
7. Assign the application role to employees, who are authorized to edit the customer in One Identity Manager.

Related Topics

• One Identity Manager Users for Managing G Suite

Troubleshooting

Newly Added User Accounts are Marked as Outstanding

If G Suite is synchronized with the One Identity Manager database shortly after provisioning new user accounts, these user accounts might be marked as outstanding in the One Identity Manager (or deleted, depending on the configuration of the synchronization). This error only occurs if a scope has been defined in the synchronization project for the target system.

Probable reason

Adding new user account in G Suite takes about 24 hours. If synchronization with the One Identity Manager database is started within these 24 hours, the error described can occur.

Solution

To prevent this error

• Avoid declaring a scope for this target system.

If a scope is required

1. Configure the user account synchronization so that objects, which do not exist in One Identity Manager are marked as outstanding.

2. If the error occurs, run a target system comparison.

   For more information, see Post-Processing Outstanding Objects.

   1. Select the object that have been wrongly marked as outstanding.

   2. Apply the method "Reset".

      This removes the "Outstanding" mark. the next time synchronization is run, the error should not occur.

For more detailed information about defining a scope and specifying handling methods for synchronization steps, see the One Identity Manager Target SystemAn instance of a target system in which the employees managed by One Identity Manager have access to network resources. Example: An Active Directory domain X for target system type "Active Directory", a directory Y for target system type "LDAP", a client Z for target system type "SAP R/3". SynchronizationThe process of comparing data between One Identity Manager and a target system. Objects and their properties are compared by fixed rules. Synchronization results in the identical data situation in the target system and One Identity Manager database. Reference Guide.