Chat now with support
Chat with Support

Identity Manager 8.0 - Identity Management Base Module Administration Guide

Basics for Mapping Company Structures in One Identity Manager Managing Departments, Cost Centers and Locations Working with Dynamic Roles Employee Administration
One Identity Manager Users for Employee Administration Basic Configuration Data for Employees Entering Employee Master Data Employee's Central User Account Employee's Central Password Employee's Default Email Address Disabling and Deleting Employees Assigning Company Resources to Employees Origin of an Employee's Roles and Entitlements Analyzing Role Memberships and Employee Assignments Mapping Multiple Employee Identities Limited Access to One Identity Manager Additional Tasks for Managing Employees Determining an Employee‘s Language Determining an Employee‘s Working Hours Employee Reports
Managing Devices and Workdesks Managing Resources Set up Extended Properties Appendix: Configuration Parameters for Managing Departments, Cost Centers and Locations Appendix: Configuration Parameters for Managing Applications Appendix: Configuration Parameters for Managing Devices and Workdesks Appendix: Authentication Modules for Logging into the One Identity Manager

Assigning Resources Directly to Employees

Resources can be assigned directly or indirectly to employees. Indirect assignment is carried out by allocating employees and resources in company structures, like departments, cost centers, locations or business roles.

To react quickly to special requests, you can assign resources directly to an employee.

To assign resources directly to an employee

  1. Select the Employees | Employees.
  2. Select the employee to which the resources will be assigned, from the result list.
  3. Select Assign resources in the task view.
  4. Assign the resources in Add assignments.

    - OR -

    Remove them in Remove assignments.

  5. Save the changes.
Related Topics

Assigning Applications Directly to Employees

You can assign applications directly or indirectly to employees. Indirect assignment is carried out by assigning employees and applications to company structures, like departments, cost centers, locations or business roles.

To react quickly to special requests, you can assign applications directly to an employee.

To assign an application directly to an employee

  1. Select the Employees | Employees.
  2. Select the employee to which the application will be assigned from the result list.
  3. Select Assign applications in the task view.
  4. Assign applications in Add assignments.

    - OR -

    Remove applications in Remove assignments.

  5. Save the changes.

Assigning System Roles Directly to Employees

Assigning System Roles Directly to Employees

Installed Modules:

System Roles Module

System roles can be assigned directly or indirectly to a employees. Indirect assignment is carried out by allocating the employees and system roles in company structures, like departments, cost centers, locations or business roles.

To react quickly to special requests, you can assign system roles directly to an employee.

To assign system roles directly to an employee

  1. Select the Employees | Employees.
  2. Select the employee in the result list.
  3. Select Assign system roles in the task view.
  4. Assign system roles in Add assignments.

    - OR -

    Remove system roles from Remove assignments.

  5. Save the changes.
Related Topics
  • One Identity Manager System Roles Administration Guide

Origin of an Employee's Roles and Entitlements

Origin of an Employee's Roles and Entitlements

The report "Show entitlements origin" allows you to determine which entitlements a employee owns and where they come from. You can establish whether the employee obtained an entitlements directly or indirectly. For example, in the case of an indirect assignment, you can determine whether the entitlement resulted from a department memberships or a request,

You can also use the report to discover which departments, cost centers, locations and business roles are assigned to an employee and how the membership evolved.

To use the origin report

  • Set the configuration parameter "SysConfig\Display\SourceDetective" in the Designer and compile the database.

To display the origin of an employee's entitlements

  1. Select the Employees | Employees.
  2. Select an employee in the result list and run the report Show entitlements origin.
  3. Under "Assigned objects", you will see the employee's entitlements, departments, cost centers, locations and business roles. Select an entry by double-clicking on it, to view more details.
  4. Under "Origin", details of the selected entry are display in a hierarchical structure.

    You can see whether the assignment was a direct assignment, dynamic assignment or a request.

    • Use the Details... button to switch to the dynamic role or to the request.
    • Double-click on some of the entries in the detail view to go to the object.
    • Use the Inspect button to obtain further information about the entitlement's assignment.

Example of Entitlement Origin

The "show entitlements origin" report establishes that Clara Harris is assigned to the Active Directory group "Finance".

The report answers several questions.

Question Why does Clara Harris have the Active Directory group "Finance".
Answer

Clara Harris owns a Active Directory user account and this user account is assigned to the group "Finance".

Question Why is the user account assigned to the group "Finance"?
Answer

Clara Harris is assigned to the department "Finance".

 

The department "Finance" inherits from the department "Global Finance" The department "Global Finance" is directly assigned to the group "Finance".

Question Why is Clara Harris in the department "Finance"?
Answer

There is a department membership request for Clara Harris.

Related Documents