Managing SharePoint Environments
Architecture Overview
One Identity Manager Users for Managing an SharePoint
Claims-Based Authentication
Setting Up SharePoint Farm Synchronization
Users and Permissions for Synchronizing with a SharePoint Farm
Setting Up the Synchronization Server
Creating a Synchronization Project for initial Synchronization of a SharePoint Farm
Special Synchronization Cases for Valid Permissions
Show Synchronization Results
Customizing Synchronization Configuration
Basic Data for Managing SharePoint
How to Configure SharePoint Synchronization
Configuring Synchronization of Several SharePoint Farms
Updating Schemas
Speeding Up Synchronization with Revision Filtering
Post-Processing Outstanding Objects
Configuring Memberships Provisioning
Supporting Analysis of Synchronization Issues
Deactivating Synchronization
Authentication Modes
Prefixes
Zones and Alternative URLs
SharePoint Site Templates
SharePoint Permissions
SharePoint Quotas
SharePoint Languages
Editing a Server
Target system managers
Setting Up Account Definitions
SharePoint Farms
SharePoint Web Applications
SharePointSite Collections and Sites
Creating an Account Definition
Setting Up Manage Levels
Creating a Formatting Rule for IT Operating Data
Determining IT Operating Data
Modifying IT Operating Data
Assigning Account Definitions to Employees
Assigning Account Definitions to Departments, Cost Centers and Locations
Assigning Account Definitions to Business Roles
Assigning Account Definitions to all Employees
Assigning Account Definitions Directly to Employees
Assigning Account Definitions to System Roles
Adding Account Definitions in the IT Shop
Assigning Account Definitions to a Target System
Deleting an Account Definition
SharePoint Site Collections
SharePoint Sites
SharePoint User Accounts
General Master Data for a Site
Address Data for a Site
Site Design Properties
Additional Tasks for Managing Sites
Child Sites Inheriting Permissions
Setting Up SharePoint Site Collections and Sites
Supported User Account Types
Entering Master Data for SharePoint User Accounts
Additional Tasks for Managing SharePoint User Accounts
SharePoint Roles and Groups
Overview of SharePoint User Accounts
Assigning SharePoint Groups Directly to SharePoint User Accounts
Assigning SharePoint Roles directly to User Accounts
Assigning Extended Properties
Using Custom Authentication Modes
Automatic Assignment of Employees to SharePoint User Accounts
Deleting and Restoring SharePoint User Accounts
SharePoint Groups
Permissions for SharePoint Web Applications
Reports about SharePoint Site Collections
Appendix: Configuration Parameters for Managing SharePoint
Appendix: Default Project Template for SharePoint
Entering Master Data for SharePoint Groups
Assigning SharePoint Groups to SharePoint User Accounts
SharePoint Roles and Permission Levels
Assigning SharePoint Groups to Departments, Cost Centers and Locations
Assigning SharePoint Groups to Business Roles
Assigning SharePoint User Accounts directly to an SharePoint Group
Assigning SharePoint Roles to SharePoint Groups
Adding SharePoint Groups to System Roles
Adding SharePoint Groups to the IT Shop
Adding SharePoint Groups automatically to the IT Shop
Additional Tasks for Managing SharePoint Groups
Overview of SharePoint Groups
Effectiveness of Group Memberships
SharePoint Group Inheritance Based on Categories
Assigning Extended Properties to a SharePoint Group
Deleting SharePoint Groups
Entering Master Data for SharePoint Permission Levels
Additional Tasks for Managing SharePoint Permission Levels
Special Synchronization Cases for Valid Permissions
Entering Master Data for SharePoint Roles
Assigning SharePoint Roles to SharePoint User Accounts
Assigning SharePoint Roles to Departments, Cost Centers and Locations
Assigning SharePoint Roles to Business Roles
Assigning SharePoint User Accounts directly to a SharePoint Role
Assigning SharePoint Groups to SharePoint Roles
Adding SharePoint Roles to System Roles
Adding SharePoint Roles to the IT Shop
Additional Tasks for Managing SharePoint Roles
Deleting SharePoint Roles and Permission Levels
Assigning Extended Properties to a SharePoint Group
SharePoint Roles and Groups > SharePoint Groups > Additional Tasks for Managing SharePoint Groups > Assigning Extended Properties to a SharePoint Group
Assigning Extended Properties to a SharePoint Group
Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.
To specify extended properties for a group
- Select the category SharePoint | Groups.
- Select the group in the result list.
- Select Assign extended properties in the task view.
-
Assign extended properties in Add assignments.
The view- OR -
Remove extended properties from Remove assignments.
- Save the changes.
For more detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.
Deleting SharePoint Groups
Deleting SharePoint Groups
To delete a group
- Select the category SharePoint | Groups.
- Select the group in the result list.
- Click
to delete the group.
- Confirm the security prompt with Yes.
The group is deleted completely from the One Identity Manager database and from SharePoint.
SharePoint Roles and Permission Levels
SharePoint Roles and Permission Levels
You can define so-called permission levels in SharePoint to grant permissions to objects in a site. These permission levels group together different SharePoint permissions. Permission levels with a unique reference to a site are mapped in the One Identity Manager database as SharePoint roles. You can assign SharePoint roles through groups, or directly to user accounts. SharePoint users obtain their permissions for site objects in this way.
Figure 4: SharePoint Roles and Permission Levels in the One Identity Manager
Entering Master Data for SharePoint Permission Levels
SharePoint Roles and Groups > SharePoint Roles and Permission Levels > Entering Master Data for SharePoint Permission Levels
Entering Master Data for SharePoint Permission Levels
To edit master data for a permission level
- Select the category SharePoint | Permission levels.
- Select the permission level in the result list. Select Change master data in the task view.
- OR -
Click
in the result list toolbar.
- Enter the required data on the master data form.
- Save the changes.
Enter the following properties for a permission level on the master data form:
| Property | Description |
|---|---|
| permissions level | Name of the permissions level. |
| Site | Unique identifier for the site the permission level is added to. |
| Description | Spare text box for additional explanation. |
| Hidden | Specifies whether a SharePoint role with the permission level can be assigned to user accounts or groups. |