To assign an account definition to all employees
Select the category Active Directory | Basic configuration data | Account definitions | Account definitions.
|
IMPORTANT: Only set this option if you can ensure that all current internal employees in the database and all pending newly added internal employees obtain a user account in this target system. |
The account definition is assigned to every employee that is not marked as external. New employees automatically obtain this account definition as soon as they are added. The assignment is calculated by the DBQueue Processor.
|
NOTE: Disable the option Automatic assignment to employees to remove automatic assignment of the account definition to all employees. The account definition cannot be reassigned to employees from this point on. Existing assignments remain intact. |
To assign an account definition directly to employees
Select the category Active Directory | Basic configuration data | Account definitions | Account definitions.
- OR -
Remove employees from Remove assignments.
Installed Modules: | System Roles Module |
|
NOTE: Account definitions with the option Only use in IT Shop can only by assigned to system roles that also have this option set. |
To add account definitions to a system role
Select the category Active Directory | Basic configuration data | Account definitions | Account definitions.
- OR -
Remove assignments to system roles in Remove assignments.
A account definition can be requested by shop customers when it is assigned to an IT Shop shelf. To ensure it can be requested, further prerequisites need to be guaranteed.
|
NOTE: IT Shop administrators can assign account definitions to IT Shop shelves if login is role-based. Target system administrators are not authorized to add account definitions in the IT Shop. |
To add an account definition to the IT Shop
- OR -
Select the category Entitlements | Account definitions (role-based login).
To remove an account definition from individual IT Shop shelves
- OR -
Select the category Entitlements | Account definitions (role-based login).
To remove an account definition from all IT Shop shelves
- OR -
Select the category Entitlements | Account definitions (role-based login).
The account definition is removed from all shelves by the One Identity Manager Service. All requests and assignment requests with this account definition are canceled in the process.
For more detailed information about request from company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy