Use this task to assign a permissions control directly to user accounts.
To assign permissions controls to user accounts
Assign user accounts in Add assignments.
The view- OR -
Remove user accounts from Remove assignments.
Use this task to assign a permissions control directly to groups.
To assign permissions controls to groups
Assign groups in Add assignments.
The view- OR -
Remove groups from Remove assignments.
To delete a permissions control
This deletes the permissions control completely from the One Identity Manager database. Once you have deleted a permissions control, it is also deleted in the Universal Cloud Interface Module through the provisioning process and then in the cloud application. The deletion is logged as a pending change. You can see whether the permissions control has been deleted in the cloud application from the process status for the pending change. The same applies if permissions control assignments to user accounts or groups are deleted.
Changes to cloud objects can only be made in the Cloud Systems Management Module. ProvisioningActual changes to an object in the One Identity Manager database (added, modified, deleted) are made immediately written to the target system. processes ensure that object changes are transferred from the Cloud Systems Management Module into the Universal Cloud Interface Module. By default, these object changes are then published in the cloud application by automatic provisioning processes.
The One Identity Manager logs the object changes as pending changes in separate tables. The table QBMPendingChange contains the modified objects and their processing status. The details of the changes, operations to execute, time stamp and processing status are saved in the QBMPendingChangeDetail.
The processing status of an object is not set to successful until all associated changes for this object have been successfully provisioned. An object's processing status is set as failed if all associated changes have been processed and at least one them has failed.