Identity Manager 8.0 - Identity Management Base Module Administration Guide

Employee's first name.

Employee's last name.

Second middle name.

Employee's form of address. This is automatically set depending on gender.

Employee's title.

Employee's surname prefix, for example "del", "von".

Employee's preferred name.

Employee's initials. These are automatically taken from first and last names.

Employee's gender.

Employee's date of birth.

Employee's name at date.

Description of employee's job within your company.

Language used for sending email notifications to the employee.

Note about sub-organizations to which the Employee belongs.

Specifies whether the employee is currently employed by the company. If this option is set, the employee has left the company. All privileges as One Identity Manager user are removed.

Specifies whether the employee master data was approved by the employee’s manager. You can select the following certification statuses:

• New – The employee was newly added to the One Identity Manager database.
• Certified – Employee master data was granted approval by the manager.
• Denied – Employee master data was denied approval by the manager. The employee is permanently disabled.

Certification status is set through certification procedures.

Labels the employee as important.

Specifies whether the employee is considered a risk for the company. Depending on how you configure this, you can prevent employees with such labels from inheriting resources and permissions and their user accounts are locked.

Specifies whether the employee inherits company resources through roles. If this option is set, the employee cannot inherit. Company resources the employee receives through IT Shop requests are not assigned either. Direct assignments remain intact.

If the configuration parameter "QER\Attestation\UserApproval" is set, the option is set with respect to the option Disable permanently. If the employee is permanently disabled, the option No inheritance is set through a formatting rule.

Specifies whether the employee is employed internally or externally by your company. If this option is set, the employee is external. External employees are excluded from automatic account definition assignment in the default version of the One Identity Manager.

Enter a company. Use the next to the text box to add a new company.

Employee's workdesk.

A risk index is calculated to evaluate the risk of an employee based on their permissions. An employee‘s risk index is determined from the risk indexes of their user accounts. This property is only visible if the configuration parameter "QER\CalculateRiskIndex" is set.

Spare text box for additional explanation.

Spare text box for additional explanation.

Employee's personnel number.

Department to which the employee is primary assigned. The employee can obtain company resources through this assignment when One Identity Manager is configured respectively.

Furthermore, IT operating data for user accounts and mailboxes can be determined though the department.

Cost center to which the employee is primary assigned. The employee can obtain company resources through this assignment when One Identity Manager is configured respectively.

Furthermore, IT operating data for user accounts and mailboxes can be determined though the cost center.

Business role to which the employee is assigned. The employee can obtain company resources through this assignment when One Identity Manager is configured respectively.

Furthermore, IT operating data for user accounts and mailboxes can be determined though the business role.

Security code for the employee for, for example, access permission.

Date on which to create the user account in the target system. This date should be earlier than the entry date. Use custom processes to automatically create user accounts in One Identity Manager on this date.

Date the employee started at the company. This is filled with the current date when the employee is added.

Date the employee started at the company. Enter a leaving date for the employee to lock their user account as from a specific point in time. The leaving date is checked regularly by the schedule "Lock accounts of employees that have left the company". When the leaving is met, the employee is blocked.

Additional information about the employee’s affiliation.

Specifies whether the employee is temporarily absent from the company If this option is set, enter the time period for the temporarily absence.

Date from which the employee and associated user accounts are disabled.

Date until which the employee and associated user accounts are disabled. There is a schedule implemented ("Enable temporarily disabled accounts") that monitors the end date of the period of absence. When this date is reached the employee and their user accounts are reenabled.

Change the date of the last working day if, for example, an employee leaves the company on a specific day but access to their data should be remain available for longer.

Employee’s managers can assume several tasks in One Identity Manager such as

• Edit employee master data for their staff
• Certify employee master data for their staff
• Attest company resources assigned to their staff
• Approve request for their staff in the IT Shop

Employee cannot be assigned as their own manager.

Location to which the employee is primary assigned. The employee can obtain company resources through this assignment when One Identity Manager is configured respectively.

Furthermore, IT operating data for user accounts and mailboxes can be determined though the location.

Employee's telephone number.

Employee's mobile number.

Employee's fax number.

Specifies whether the employee can be shown in the telephone book.

Street or road.

Building

Office mailbox.

Zip code.

City.

Country. You require this to determine the employee’s language and working hours. This data is usually stored with the employee’s location or department data. You can also enter it directly by the employee.

State. You require this to determine the employee’s language and working hours. This data is usually stored with the employee’s location or department data. You can also enter it directly by the employee.

Floor.

Room.