Identity Manager 8.0 - Identity Management Base Module Administration Guide

Basics for Mapping Company Structures in One Identity Manager Managing Departments, Cost Centers and Locations Working with Dynamic Roles Employee Administration
One Identity Manager Users for Employee Administration Basic Configuration Data for Employees Entering Employee Master Data Employee's Central User Account Employee's Central Password Employee's Default Email Address Disabling and Deleting Employees Assigning Company Resources to Employees Origin of an Employee's Roles and Entitlements Analyzing Role Memberships and Employee Assignments Mapping Multiple Employee Identities Limited Access to One Identity Manager Additional Tasks for Managing Employees Determining an Employee‘s Language Determining an Employee‘s Working Hours Employee Reports
Managing Devices and Workdesks Managing Resources Set up Extended Properties Appendix: Configuration Parameters for Managing Departments, Cost Centers and Locations Appendix: Configuration Parameters for Managing Applications Appendix: Configuration Parameters for Managing Devices and Workdesks Appendix: Authentication Modules for Logging into the One Identity Manager

Additional Tasks for Managing Departments, Cost Centers and Locations.

After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.

Creating Dynamic Roles for Departments, Cost Centers and Locations

Creating Dynamic Roles for Departments, Cost Centers and Locations

Use this task to define dynamic roles for single departments, cost centers or location. This allows you to specify memberships in these roles.

NOTE: The task Create dynamic role is only set for departments, cost centers and locations, which do not have the option Dynamic roles not allowed set.

To create a dynamic role

  1. Select the category Organizations | <Role class>.
  2. Select the role in the result list.
  3. Select Create dynamic role in the task view.
  4. Enter the required master data.
  5. Save the changes.

To edit a dynamic role

  1. Select the category Organizations | <Role class> | Dynamic roles.
  2. Select the role in the result list.
  3. Open the role's overview form.
  4. Select the form element Dynamic roles and click on the dynamic role.
  5. Select Change master data in the task view.
  6. Edit the dynamic role's master data.
  7. Save the changes.
Related Topics

Assign Organizations

Use this task to map the relationships of a department, cost center of a location to other roles. This task has the same effect as assigning a department, cost center or location on the role master data form. The assignment is entered in the respective foreign key column in the base table.

To assign a cost center or location to departments

  1. Select the category Organizations | Cost centers or Organizations | Locations.
  2. Select the role in the result list.
  3. Select Assign organizations.
  4. Select the Departments tab.
  5. Assign departments in Add assignments.

    The selected role is assigned to all departments as primary cost center or location.

    - OR -

    Remove the departments in Remove assignments.

  6. Save the changes.

To assign a department or a location to cost centers

  1. Select the category Organizations | Departments or Organizations | Locations.
  2. Select the role in the result list.
  3. Select Assign organizations.
  4. Select the Cost centers tab.
  5. Assign cost centers in Add assignments.

    The selected role is assigned to all cost centers as primary department or location.

    - OR -

    Remove the cost centers in Remove assignments.

  6. Save the changes.

To assign a department or a cost center to locations

  1. Select the category Organizations | Departments or Organizations | Cost centers.
  2. Select the role in the result list.
  3. Select Assign organizations.
  4. Select the Locations tab.
  5. Assign locations in Add assignments.

    The selected role is assigned to all locations as primary department or cost center.

    - OR -

    Remove the locations in Remove assignments.

  6. Save the changes.

Specifying Inheritance Exclusion for Roles

Specifying Inheritance Exclusion for Roles

You can define conflicting roles to prevent employees, devices or workdesks from being assigned to several roles at the same time and from obtaining mutually exclusive company resources through these roles. At the same time, you specify which application roles, departments, cost centers and locations need to be mutually exclusive. This means you may not assign these roles to one and the same employee (device, workdesk).

NOTE: Only roles, which are defined directly as conflicting roles cannot be assigned to the same employee (device, workdesk). Definitions made on parent or child roles do not affect the assignment.

To configure inheritance exclusion

  • Set the configuration parameter "QER\Structures\ExcludeStructures" in the Designer and compile the database.

To define inheritance exclusion for a departments

  1. Select the category Organizations | Departments.
  2. Select the department in the result list.
  3. Select Edit conflicting departments in the task view.
  4. Assign the departments that are mutually exclusive to the selected department in Add assignments.

    - OR -

    Remove the conflicting departments that are no longer mutually exclusive in Remove assignments.

  5. Save the changes.

To define inheritance exclusion for a cost center

  1. Select the category Organizations | Cost centers.
  2. Select the cost center in the result list.
  3. Select Edit conflicting cost centers in the task view.
  4. Assign the cost centers that are mutually exclusive to the selected cost center in Add assignments.

    - OR -

    Remove the conflicting cost centers that are no longer mutually exclusive in Remove assignments.

  5. Save the changes.

To define inheritance exclusion for a cost center

  1. Select the category Organizations | Locations.
  2. Select the location in the result list.
  3. Select Edit conflicting locations in the task view.
  4. Assign the locations that are mutually exclusive to the selected location in Add assignments.

    - OR -

    Remove the conflicting locations that are no longer mutually exclusive in Remove assignments.

  5. Save the changes.
Detailed information about this topic
Related Documents