Chat now with support
Chat with Support

Identity Manager 8.0 - Application Roles Administration Guide

Define Inheritance Exclusion for Application Roles

Define Inheritance Exclusion for Application Roles

It is possible that employees cannot own certain system roles at the same time. Thus, for example, exception approvers for rule violations may not be rule supervisors at the same time. You can specify mutually exclusive (conflicting) application roles to achieve this behavior. Then you cannot assign these application roles to the same person anymore.

 NOTE: Only system roles, which are defined directly as conflicting application roles cannot be assigned to the same employee. Definitions made on parent or child application roles do not effect the assignment.

To define conflicting application roles

  • Set the configuration parameter "QER\Structures\ExcludeStructures" in the Designer and compile the database.

To define conflicting application roles

  1. Select the category One Identity Manager administration.
  2. Select a category in the navigation view.
  3. Select the application role in the result list for which you want to define conflicting application roles.
  4. Select Edit conflicting application roles in the task view.
  5. Assign the application roles that are mutually exclusive to the selected application role in Add assignments.

    - OR -

    Remove the application roles that are no longer mutually exclusive in Remove assignments.

  6. Save the changes.

Assign subscribable reports

 NOTE: This function is only available if the Report Subscription Module is installed.

Use this task to assign subscribable reports to selected application roles. All employee in this application role can subscribe to reports in the Web Portal.

 NOTE: This task is only available if the application roles (or a parent application role) is assigned to a permissions group.

 NOTE: You cannot assign subscribable reports to the application roles Base roles | Employee managers, Base roles | Everyone (Lookup) and Base roles | Everyone (Change).
  1. Select the category One Identity Manager administration.
  2. Select a category in the navigation view.
  3. Select an application role in the result list.
  4. Select Assign subscribable reports in the task view.
  5. Assign reports in Add assignments.

    - OR -

    Remove the reports in Remove assignments.

  6. Save the changes.

For more detailed information about report subscriptions, see the One Identity Manager Report Subscriptions Administration Guide.

Assign Extended Properties to Application Roles

Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.

To specify extended properties for an application role

  1. Select the category One Identity Manager administration.
  2. Select a category in the navigation view.
  3. Select an application role in the result list.
  4. Select Assign extended properties in the task view.

  5. Assign extended properties in Add assignments.

    The view- OR -

    Remove extended properties from Remove assignments.

  6. Save the changes.

For more detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

Reports about Application Roles

One Identity Manager makes various reports available containing information about the selected base object and its relations to other One Identity Manager database objects. The following reports are available for application roles.

Table 14: Reports about Application Roles
Report Description
Overview of all Assignments This report finds all the roles in which employees from the selected application roles are also members.
Show historical memberships

This report lists all members of the selected application role and the length of their membership.

Related Topics
Related Documents