Assigning Permissions Controls to User Accounts
Assigning Permissions Controls to User Accounts
Use this task to assign a permissions control directly to user accounts.
To assign permissions controls to user accounts
- Select the category Cloud Target Systems | <target system> | Permissions controls.
- Select the permissions control in the result list.
- Select Assign user accounts in the task view.
-
Assign user accounts in Add assignments.
The view- OR -
Remove user accounts from Remove assignments.
- Save the changes.
Assigning Permissions Controls to Groups
Assigning Permissions Controls to Groups
Use this task to assign a permissions control directly to groups.
To assign permissions controls to groups
- Select the category Cloud Target Systems | <target system> | Permissions controls.
- Select the permissions control in the result list.
- Select Assign groups in the task view.
-
Assign groups in Add assignments.
The view- OR -
Remove groups from Remove assignments.
- Save the changes.
Deleting Permissions Controls
Deleting Permissions Controls
To delete a permissions control
- Select the category Cloud Target Systems | <target system> | Permissions controls.
- Select the permissions control in the result list.
- Click
to delete the permissions control.
- Confirm the security prompt with Yes.
This deletes the permissions control completely from the One Identity Manager database. Once you have deleted a permissions control, it is also deleted in the Universal Cloud Interface Module through the provisioning process and then in the cloud application. The deletion is logged as a pending change. You can see whether the permissions control has been deleted in the cloud application from the process status for the pending change. The same applies if permissions control assignments to user accounts or groups are deleted.
Related Topics
Provisioning Object Changes
Provisioning Object Changes
Changes to cloud objects can only be made in the Cloud Systems Management Module. Provisioning
The One Identity Manager logs the object changes as pending changes in separate tables. The table QBMPendingChange contains the modified objects and their processing status. The details of the changes, operations to execute, time stamp and processing status are saved in the QBMPendingChangeDetail.
The processing status of an object is not set to successful until all associated changes for this object have been successfully provisioned. An object's processing status is set as failed if all associated changes have been processed and at least one them has failed.