Identity Manager 8.0 - Identity Management Base Module Administration Guide

Assigning Resources Directly to Employees

Resources can be assigned directly or indirectly to employees. Indirect assignment is carried out by allocating employees and resources in company structures, like departments, cost centers, locations or business roles.

To react quickly to special requests, you can assign resources directly to an employee.

To assign resources directly to an employee

1. Select the Employees | Employees.
2. Select the employee to which the resources will be assigned, from the result list.
3. Select Assign resources in the task view.
4. Assign the resources in Add assignments.

   - OR -

   Remove them in Remove assignments.

5. Save the changes.

Related Topics

• Assigning Resources Directly to Employees
• Managing Resources

Assigning Applications Directly to Employees

You can assign applications directly or indirectly to employees. Indirect assignment is carried out by assigning employees and applications to company structures, like departments, cost centers, locations or business roles.

To react quickly to special requests, you can assign applications directly to an employee.

To assign an application directly to an employee

1. Select the Employees | Employees.
2. Select the employee to which the application will be assigned from the result list.
3. Select Assign applications in the task view.
4. Assign applications in Add assignments.

   - OR -

   Remove applications in Remove assignments.

5. Save the changes.

Assigning System Roles Directly to Employees

System roles can be assigned directly or indirectly to a employees. Indirect assignment is carried out by allocating the employees and system roles in company structures, like departments, cost centers, locations or business roles.

To react quickly to special requests, you can assign system roles directly to an employee.

To assign system roles directly to an employee

1. Select the Employees | Employees.
2. Select the employee in the result list.
3. Select Assign system roles in the task view.

4. Assign system roles in Add assignments.

   - OR -

   Remove system roles from Remove assignments.

5. Save the changes.

Related Topics

• One Identity Manager System Roles Administration Guide

Origin of an Employee's Roles and Entitlements

The report "Show entitlements origin" allows you to determine which entitlements a employee owns and where they come from. You can establish whether the employee obtained an entitlements directly or indirectly. For example, in the case of an indirect assignment, you can determine whether the entitlement resulted from a department memberships or a request,

You can also use the report to discover which departments, cost centers, locations and business roles are assigned to an employee and how the membership evolved.

To use the origin report

• Set the configuration parameter "SysConfig\Display\SourceDetective" in the Designer and compile the database.

To display the origin of an employee's entitlements

1. Select the Employees | Employees.
2. Select an employee in the result list and run the report Show entitlements origin.
3. Under "Assigned objects", you will see the employee's entitlements, departments, cost centers, locations and business roles. Select an entry by double-clicking on it, to view more details.
4. Under "Origin", details of the selected entry are display in a hierarchical structure.

   You can see whether the assignment was a direct assignment, dynamic assignment or a request.

   • Use the Details... button to switch to the dynamic role or to the request.
   • Double-click on some of the entries in the detail view to go to the object.
   • Use the Inspect button to obtain further information about the entitlement's assignment.

Example of Entitlement Origin

The "show entitlements origin" report establishes that Clara Harris is assigned to the Active Directory group "Finance".

The report answers several questions.