A user account can be linked to an employee in the One Identity Manager. You can also manage user accounts separately from employees.
|
NOTE: It is recommended to use account definitions to set up user accounts for company employees. In this case, some of the master data described in the following is mapped through templates from employee master data. |
|
NOTE: If employees obtain their user accounts through account definitions, they have to have a central user account |
To edit master data for a user account
- OR-
Click in the result list toolbar.
To manually assign or create a user account for an employee
Enter the following data on the General tab:
Property | Description | ||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Employee |
Employee that uses this user account. An employee is already entered if the user account was generated by an account definition. If you create the user account manually, you can select an employee in the menu. If you use automatic employee assignment, an associated employee is created and entered into the user account when the user account is saved. | ||||||||||||||
Account definition |
Account definition through which the user account was created. Use the account definition to automatically fill user account master data and to specify a manage level for the user account. The One Identity Manager finds the IT operating data of the assigned employee and enters it in the corresponding fields in the user account.
To create the user account manually through an account definition, enter an employee in the Employee box. You can select all the account definitions assigned to this employee and through which no user account has been created for this employee. | ||||||||||||||
Manage level |
User account's manage level. Select a manage level from the menu. You can only specify the manage level can if you have also entered an account definition. All manage levels of the selected account definition are available in the menu. | ||||||||||||||
Domain |
Domain in which the user account is created. | ||||||||||||||
Structural object class | Structural object class representing the object type. By default, user accounts in One Identity Manager are added with the object class "INETORGPERSON". | ||||||||||||||
Container |
Container in which to create the user account. If you have assigned an account definition, the container is determined from the company IT data for the assigned employee depending on the manage level of the user account. When the container is selected, the defined name for the user is created using a formatting rule. | ||||||||||||||
Object class |
List of classes defining the attributes for this object. By default, user accounts in One Identity Manager are added with the object class "INETORGPERSON". However, you can add object classes and auxiliary classes in the input field that are used by other LDAP and X.500 directory services. | ||||||||||||||
Name |
User account identifier. The identifier is made up of the user‘s first and last names. | ||||||||||||||
Display name | User account display name. The display name is made up of the first and last names. | ||||||||||||||
Distinguished name |
User account's distinguished name. The distinguished name is formatted from the user account's identifier and the container and cannot be changed. | ||||||||||||||
Object SID (AD) | The object's security ID (SID) in Active Directory. | ||||||||||||||
First name |
The user’s first name. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. | ||||||||||||||
Last name |
The user’s last name. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. | ||||||||||||||
Initials |
The user’s initials. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. | ||||||||||||||
Job description |
Job description. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. | ||||||||||||||
Login name |
Login name. If you assigned an account definition, the login name is made up of the employee’s central user account depending on the manage level. | ||||||||||||||
Password |
Password for the user account. Depending on the configuration parameter "Person\UseCentralPassword" the employee’s central password can be mapped to the user account‘s password. If you use an initial password for the user accounts, it is automatically entered when a user account is created.
| ||||||||||||||
Password confirmation |
Reconfirm password. | ||||||||||||||
Risk index (calculated) |
Maximum risk index values for all assigned | ||||||||||||||
Account expiry date |
Account expiry date. Specifying an expiry data for the account has the effect that the logon for this user account is blocked as soon as the given date is exceeded. If you assigned an account definition, the employee’s last day of work it is automatically taken as the expiry date depending on the manage level. Any existing account expiry date is overwritten in this case. | ||||||||||||||
Category |
Categories for the inheritance of groups by the user account. Select one or more categories from the menu. Groups can be selectively inherited by user accounts. To do this, groups and user accounts or contacts are divided into categories. | ||||||||||||||
Description |
Spare text box for additional explanation. | ||||||||||||||
Identity |
User account's identity type
| ||||||||||||||
Privileged user account |
Specifies whether this is a privileged user account. | ||||||||||||||
Groups can be inherited |
Specifies whether the user account groups can inherit through the employee. If this option is set, the user account inherits groups through hierarchical roles or IT Shop requests.
| ||||||||||||||
User account is disabled |
Specifies whether the user account is disable. If a user account is not required for a period of time, you can temporarily disable the user account by using the option <User account is deactivated>. |
Enter the data used by this user account for contacting the employee by telephone on the Contact data tab.
Property | Description |
---|---|
Picture |
Picture to display in a telephone book, for example.
|
Email address |
Email address. If you assigned an account definition, the email address is made up of the employee’s default email address depending on the manage level of the user account. |
Phone |
Telephone number. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. |
Mobile phone |
Mobile number. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. |
Pager |
Pager number. |
Fax |
Fax number. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. |
Phone private |
Private telephone number. |
Phone, private (2) |
Extra telephone number. |
Internationale ISDN no. |
Internationale ISDN number. |
Additional email addresses |
Additional email addresses. |
X.121 address |
Addressing as X.121 address. |
X.400 address | Address in X.400 format. |
Enter the following address data for contacting the employee on the Address data tab.
Property | Description |
---|---|
Room |
Room. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. |
Registered address | Postal address. |
Address | Postal address. |
Address (private) | Postal address (private). |
Mailbox |
Mailbox. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. |
Street |
Street or road. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. |
Zip code |
Zip code. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. |
State |
State. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. |
© 2023 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy