Appendix: Configuration Parameter for Managing G Suite
Appendix: Configuration Parameter for Managing G Suite
The following configuration parameters are additionally available in One Identity Manager after the module has been installed.
|
Configuration Parameter |
Meaning if Set |
|---|---|
|
TargetSystem\GoogleApps |
Preprocessor relevant configuration parameter for controlling the database model components for the administration of the target system G Suite. If the parameter is set, the target system components are available. Changes to the parameter require recompiling the database. |
|
TargetSystem\GoogleApps\Accounts |
Parameter for configuring G Suite user account data. |
|
TargetSystem\GoogleApps\Accounts\ InitialRandomPassword |
This configuration parameter specifies whether a random generated password is issued when a new user account is added. The password must contain at least those character sets that are defined in the password policy. |
|
TargetSystem\GoogleApps\Accounts\ InitialRandomPassword\SendTo |
Specifies to which employee the email with the random generated password should be sent (manager cost center/department/location/role, employee’s manager or XUserInserted). If no recipient can be found, the password is sent to the address stored in the configuration parameter "TargetSystem\GoogleApps\DefaultAddress". |
|
TargetSystem\GoogleApps\Accounts\ InitialRandomPassword\SendTo\ MailTemplateAccountName |
This configuration parameter contains the name of the mail template sent to inform users about their initial login data (name of the user account). Use the mail template "Employee - new account created". |
|
TargetSystem\GoogleApps\Accounts\ InitialRandomPassword\SendTo\ MailTemplatePassword |
This configuration parameter contains the name of the mail template sent to inform users about their initial login data (initial password). Use the mail template "Employee - initial password for new user account". |
|
TargetSystem\GoogleApps\Accounts\ MailTemplateDefaultValues |
This configuration parameter contains the mail template used to send notifications if default IT operating data mapping values are used for automatically creating a user account. Use the mail template "Employee - new user account with default properties created". |
|
TargetSystem\GoogleApps\Accounts\ PrivilegedAccount |
This configuration parameter allows configuration of settings for privileged user accounts. |
|
TargetSystem\GoogleApps\Accounts\ TransferJPegPhoto |
This configuration parameter specifies whether changes to the employee's picture are published in existing G Suite user accounts. The picture is not part of default synchronization. It is only published when employee data is changed. |
|
TargetSystem\GoogleApps\ DefaultAddress |
The configuration parameter contains the recipient's default email address for sending notifications about actions in the target system. |
|
TargetSystem\GoogleApps\ MaxFullsyncDuration |
This configuration parameter contains the maximum runtime for synchronization. No recalculation of group memberships by the DBQueue Processor can take place during this time. If the maximum runtime is exceeded, group membership are recalculated. |
|
TargetSystem\GoogleApps\ PersonAutoDefault |
This configuration parameter specifies the mode for automatic employee assignment for user accounts added to the database outside synchronization. |
|
TargetSystem\GoogleApps\ PersonAutoDisabledAccounts |
This configuration parameters specifies whether employees are automatically assigned to disable user accounts. User accounts do not obtain an account definition. |
|
TargetSystem\GoogleApps\ PersonAutoFullsync |
This configuration parameter specifies the mode for automatic employee assignment for user accounts added to or updated in the database through synchronization. |
|
TargetSystem\GoogleApps\ PersonExcludeList |
List of all user accounts for which automatic employee assignment should not take place. Names given in a pipe (|) delimited list that is handled as a regular search pattern. |
Appendix: Default Project Templates for G Suite
Appendix: Default Project Templates for G Suite
A default project template ensures that all required information is added in the One Identity Manager. This includes mappings, workflows and the synchronization base object. If you do not use a default project template you must declare the synchronization base object in One Identity Manager yourself.
Use a default project template for initially setting up the synchronization project. For custom implementations, you can extend the synchronization project with the .Synchronization Editor
The template uses mappings for the following schema types.
| SchemaData model of a connected system. The schema describes all the master data from the connected system. see target system schema; see One Identity Manager schema; see connector schema; see extended schema Type in G Suite |
Table in the One Identity Manager Schema |
|---|---|
| AdminPrivilege | GAPPrivilege |
| AdminRole | GAPAdminRole |
| AdminRoleAssignment | GAPOrgAdminRole |
| Customer | GAPCustomer |
| domain | GAPDomain |
| DomainAlias | GAPDomainAlias |
| Group | GAPGroup |
| OrgUnit | GAPOrgUnit |
| ProductAndSku | GAPPaSku |
| User | GAPUser |
| UserAddress | GAPUserAddress |
| UserEmail | GAPUserEmail |
| UserExternalId | GAPUserExternalId |
|
UserIm |
GAPUserIM |
|
UserOrganization |
GAPUserOrganization |
|
UserPhone |
GAPUserPhone |
|
UserRelation |
GAPUserRelation |
|
UserWebsite |
GAPUserWebSite |
Appendix: Editing System Objects
The following table describes permitted editing methods for G Suite schema types.
|
Schema type |
Read |
Paste |
Delete |
Refresh |
|---|---|---|---|---|
|
G Suite customer (Customer) |
Yes |
No |
No |
Yes |
|
Domain (Domain) |
Yes |
No |
No |
No |
|
Domain alias (DomainAlias) |
Yes |
No |
No |
No |
|
Organization (OrgUnit) |
Yes |
Yes |
Yes |
Yes |
|
User account (User) |
Yes |
Yes |
Yes |
Yes |
|
Group (Group) |
Yes |
Yes |
Yes |
Yes |
|
Product and SKU (ProductAndSku) |
Yes |
No |
No |
Yes |
|
User account: address(UserAddress) |
Yes |
Yes |
Yes |
Yes |
|
User account: Email address (UserEmail) |
Yes |
Yes |
Yes |
Yes |
|
User account: external ID (UserExternalId) |
Yes |
Yes |
Yes |
Yes |
|
User account: instant messenger (UserIm) |
Yes |
Yes |
Yes |
Yes |
|
User account: user details (UserOrganization) |
Yes |
Yes |
Yes |
Yes |
|
User account: phone number (UserPhone) |
Yes |
Yes |
Yes |
Yes |
|
User account: relation (UserRelation) |
Yes |
Yes |
Yes |
Yes |
|
User account: website (UserWebsite) |
Yes |
Yes |
Yes |
Yes |
|
Admin role (AdminRole) |
Yes |
Yes |
Yes |
Yes |
|
Admin privilege (AdminPrivilege) |
Yes |
No |
No |
No |
|
Admin roles assignments (AdminRoleAssignment) |
Yes |
Yes |
Yes |
Yes |