Identity Manager 8.0 - Identity Management Base Module Administration Guide

Table of Contents

Basics for Mapping Company Structures in One Identity Manager

Hierarchical Role Structure Basics

Direction of Inheritance within a Hierarchy Discontinuing Inheritance

Basics for Assigning Company Resources

Direct Assignment Indirect Assignment

Secondary Assignment Primary Assignment

Assigning through Dynamic Roles Assigning through IT Shop Requests

Basics for Calculating Inheritance

Calculating Inheritance through Hierarchical Roles Calculation of Assignments

Preparing Hierarchical Roles for Company Resource Assignments

Possible Assignments of Company Resources through Roles Permit Assignments of Employees, Devices, Workdesks and Company Resources Using Roles to Limit Inheritance Inheritance Exclusion: Specifying Conflicting Roles

Managing Departments, Cost Centers and Locations

One Identity Manager Users for Organizations Base Data for Structuring Departments, Cost Centers and Locations

Roles Classes Role Types Functional areas Attestors Approvers and Approvers (IT)

Editing Departments

General Master Data for a Department Contact Data for Departments Functional Area and Risk Assessment

Editing Cost Centers

General Master Data for Cost Center Functional Area and Risk Assessment

Editing Locations

General Master Data for a Location Location Address Information Configuring a Location's Network Directions to Location Functional Area and Risk Assessment

Assigning Employees, Devices and Workdesks to Departments, Cost Centers and Locations Assigning Company Resources to Departments, Cost Centers and Locations Setting Up IT Operating Data

Modifying IT Operating Data

Additional Tasks for Managing Departments, Cost Centers and Locations.

Creating Dynamic Roles for Departments, Cost Centers and Locations Assign Organizations Specifying Inheritance Exclusion for Roles Specify Role Relations

Reports about Departments, Cost Centers and Locations

Working with Dynamic Roles

Editing Dynamic Roles

Dynamic Role Master Data

Test Condition of a Dynamic Role Calculating Role Memberships Additional Tasks for Dynamic Roles

Dynamic Role Overview Start Immediate Recalculation of Role Memberships

Employee Administration

One Identity Manager Users for Employee Administration Basic Configuration Data for Employees

Business Partners Creating Custom Mail Templates for Notifications

General Properties of a Mail Template Creating and Editing an Email Definition

Using Base Object Properties

Customizing Email Signatures

Password Policies

Predefined Password Policies Editing Password Policies

General Master Data for a Password Policy Policy Settings Character Sets for Passwords

Custom Scripts for Password Requirements

Script for Checking a Password Script for Generating a Password

Restricted Passwords Testing a Password Testing Generating a Password Assigning a Password Policy

Entering Employee Master Data

General Employee Master Data Organizational Employee Master Data Address Data Miscellaneous Employee Master Data

Employee's Central User Account Employee's Central Password

Change Password Question Mutual Aid for Resetting Passwords

Employee's Default Email Address Disabling and Deleting Employees

Temporarily Deactivating Employees Permanently Deactivating Employees

Re-enable an Employee

Deferred Deletion of Employees

Assigning Company Resources to Employees

Assigning Employees to Departments, Cost Centers and Locations Assigning Employees to Business Roles Adding Employees to IT Shop Custom Nodes Assigning Application Roles to Employees Assigning Resources Directly to Employees Assigning Applications Directly to Employees Assigning System Roles Directly to Employees

Origin of an Employee's Roles and Entitlements Analyzing Role Memberships and Employee Assignments Mapping Multiple Employee Identities Limited Access to One Identity Manager

Changing the Certification Status of an Employee

Additional Tasks for Managing Employees

Employee Overview Manually Assigning User Accounts to Employees Entering Calls for an Employee Assigning Extended Properties

Determining an Employee‘s Language Determining an Employee‘s Working Hours Employee Reports

Managing Devices and Workdesks

Base Data for Device Management

General Master Data for a Device Model Inventory Data for a Device Model

Business Partners Device status Workdesk Status Workdesk Type

Setting up a Device

General Master Data for Devices Device Networking Data

Assigning Company Resources to Devices

Assigning Devices to Departments, Cost Centers and Locations Assigning Devices to Business Roles

Additional Tasks for Managing Devices

Overview of Devices Assigning Service Agreements and Enter Calls

How to Set up a Workdesk

General Master Data for a Workdesk Workdesk Location Information Additional Information about a Workdesk

Assigning Company Resources to Workdesks

Assigning Workdesks to Departments, Cost Centers and Locations Assigning Workdesks to Business Roles Assigning Applications Directly to Workdesks Assigning System Roles Directly to Workdesks

Additional Tasks for Managing Workdesks

Workdesk Overview Assigning Devices to Workdesks Assigning Employees to Workdesks Assigning Service Agreements and Enter Calls

Asset Data for Devices

Basic Data for Asset Management

Asset classes Asset types

Data for Investments and Investment Plans Editing Device Asset Data

Master Data for Asset Data Commercial Data

Managing Resources

One Identity Manager Users for Managing Resources Base Data for Resources

Resource Types Processing status

Default Processing Status

Editing Resources

General Master Data for a Resource

Assigning Resources to Employees

Assigning Employees to Departments, Cost Centers and Locations Assigning Resources to Business Roles Assigning Resources Directly to Employees Adding Resources to the IT Shop Adding Resources to System Roles

Additional Tasks for Managing Resources

Resource Overview Assigning Extended Properties to Resources

Editing Multi Request Resources

Multi-Request Resource Master Data

Assigning Multi Request Resources to Employees

Adding Multi Request Resources to the IT Shop

Reports about Resources

Set up Extended Properties

One Identity Manager Users for Managing Extended Properties Create Property Groups Edit Extended Properties

Extended Property Master Data Specifying Scoped Boundaries

Additional Tasks for Managing Extended Properties

Extended Property Overview Assign Objects Assigning Property Groups

Appendix: Configuration Parameters for Managing Departments, Cost Centers and Locations Appendix: Configuration Parameters for Managing Applications Appendix: Configuration Parameters for Managing Devices and Workdesks Appendix: Authentication Modules for Logging into the One Identity Manager

Location Address Information

Managing Departments, Cost Centers and Locations > Editing Locations > Location Address Information

Location Address Information

Enter the following master data for contacting the location.

Table 17: Location's Address Data
Property	Description
Address	Postal address of the location.
Street	Street or road.
Building	Building
Zip code	Zip code.
Town	City.
Country	Country. You require this to determine the employee’s language and working hours.
State	State. You require this to determine the employee’s language and working hours.
Phone	Telephone number of the location.
Quick dial	Telephone short entry (without code).
Fax	Fax number of the location.
Room	Room.
Comment (room)	Spare text box for additional explanation.

Related Topics

Configuring a Location's Network

Managing Departments, Cost Centers and Locations > Editing Locations > Configuring a Location's Network

Configuring a Location's Network

Enter the location‘s network configuration data.

Table 18: Location Network Data
Property	Description
IP offset	IP offset of the location.
Subnet mask	Subnet mask of the location.

Directions to Location

Managing Departments, Cost Centers and Locations > Editing Locations > Directions to Location

Directions to Location

Enter another address and a description of the way to reach the location. Select the button next to the input field to activate it and add add data. Use the button to remove data from the list.

Table 19: Directions to Location
Property	Description
Visitors address	Location address for visitors.
Travel directions	Travel directions to the location.

Functional Area and Risk Assessment

Managing Departments, Cost Centers and Locations > Editing Locations > Functional Area and Risk Assessment

Functional Area and Risk Assessment

Here, you can enter values to classify a location for analyzing the risk of a location in the context of identity audit.

Table 20: Master Data of a Location's Functional Area

Property

Description

Functional area

Location's function area. This data is required for location's risk assessment.

Risk index (calculated)

A risk index is calculated for the location risk assessment based on assigned company resources. This property is only visible when the configuration parameter QER\CalculateRiskIndex is set.

Transparency index

Specifies how well you can trace location assignments. Use the slider to enter a value between 0 and 1.

0 ... no transparency

1 ... full transparency

Max. number of rule violations

Specify how many rule violations are permitted for this location. The value can be evaluated when compliance rules are checked.

NOTE: This property is only available if the Compliance Rules Module is installed.

Turnover for this unit

Turnover for this location.

Earnings for this unit

Earnings for this location.

Related Topics

Functional areas
One Identity Manager Risk Assessment Administration Guide
One Identity Manager Compliance Rules Administration Guide

Related Documents

© 2019 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy