How to Edit Conflicting Business Roles
Define Inheritance Exclusion for Business Roles
You can define conflicting roles to prevent employees, devices or workdesks from being assigned to several roles at the same time and from obtaining mutually exclusive company resources through these roles. At the same time, you specify which
|
|
NOTE: Only roles, which are defined directly as conflicting roles cannot be assigned to the same employee (device, workdesk). Definitions made on parent or child roles do not affect the assignment. |
To configure inheritance exclusion
- Set the configuration parameter "QER\Structures\ExcludeStructures" in the Designer and compile the database.
To define inheritance exclusion for a business role
- Select the category Business roles | <Role class>.
- Select a business role in the result list.
- Select Edit conflicting business roles in the task view.
- Assign the business roles that are mutually exclusive to the selected business role in Add assignments.
- OR -
Remove the conflicting business roles that are no longer mutually exclusive in Remove assignments.
- Save the changes.
Detailed information about this topic
Assigning Extended Properties
You can assign extended properties to business roles. Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.
To specify extended properties for a business role
- Select the category Business roles | <Role class>.
- Select the business role in the result list.
- Select Assign extended properties in the task view.
- Assign extended properties in Add assignments.
- OR -
Remove assignments to extended properties in Remove assignments.
- Save the changes.
Creating Assignment Resources
Creating Assignment Resources
You may add assignment resources to single business roles. This means you can limit assignment resources to a certain business role in the Web Portal. When the assignment resource is requested, it is no longer necessary to request the business role as well. It is automatically a part of the assignment request.
To limit an assignment resource to a business role
- Select the category Business roles | <Role class>.
- Select a business role in the result list.
- Select Create assignment resource... in the task view.
This starts a wizard, which takes you through adding an assignment resource.
Reports about Business Roles
One Identity Manager makes various reports available containing information about the selected base object and its relations to other One Identity Manager database objects. The following reports are available for business roles.
|
|
NOTE: Other sections may be available depending on the which modules are installed. |
| Report | Description |
|---|---|
| Overview of all assignments | This report finds all the roles in which employees from the selected business roles are also members. |
| Show historical memberships |
This report lists all members of the selected business role and the length of their membership. |
| Show products still to be approved | The report shows all products for a business role whose requests can be approved by the business role's members. |
| Business roles with high risk level | The report lists all business roles with a risk index equal or higher that the configurable risk index. The result can be limited to a specified role class. You can find this report in the category My One Identity Manager. |