Identity Manager 8.0 - Identity Management Base Module Administration Guide

Table of Contents

Basics for Mapping Company Structures in One Identity Manager

Hierarchical Role Structure Basics

Direction of Inheritance within a Hierarchy Discontinuing Inheritance

Basics for Assigning Company Resources

Direct Assignment Indirect Assignment

Secondary Assignment Primary Assignment

Assigning through Dynamic Roles Assigning through IT Shop Requests

Basics for Calculating Inheritance

Calculating Inheritance through Hierarchical Roles Calculation of Assignments

Preparing Hierarchical Roles for Company Resource Assignments

Possible Assignments of Company Resources through Roles Permit Assignments of Employees, Devices, Workdesks and Company Resources Using Roles to Limit Inheritance Inheritance Exclusion: Specifying Conflicting Roles

Managing Departments, Cost Centers and Locations

One Identity Manager Users for Organizations Base Data for Structuring Departments, Cost Centers and Locations

Roles Classes Role Types Functional areas Attestors Approvers and Approvers (IT)

Editing Departments

General Master Data for a Department Contact Data for Departments Functional Area and Risk Assessment

Editing Cost Centers

General Master Data for Cost Center Functional Area and Risk Assessment

Editing Locations

General Master Data for a Location Location Address Information Configuring a Location's Network Directions to Location Functional Area and Risk Assessment

Assigning Employees, Devices and Workdesks to Departments, Cost Centers and Locations Assigning Company Resources to Departments, Cost Centers and Locations Setting Up IT Operating Data

Modifying IT Operating Data

Additional Tasks for Managing Departments, Cost Centers and Locations.

Creating Dynamic Roles for Departments, Cost Centers and Locations Assign Organizations Specifying Inheritance Exclusion for Roles Specify Role Relations

Reports about Departments, Cost Centers and Locations

Working with Dynamic Roles

Editing Dynamic Roles

Dynamic Role Master Data

Test Condition of a Dynamic Role Calculating Role Memberships Additional Tasks for Dynamic Roles

Dynamic Role Overview Start Immediate Recalculation of Role Memberships

Employee Administration

One Identity Manager Users for Employee Administration Basic Configuration Data for Employees

Business Partners Creating Custom Mail Templates for Notifications

General Properties of a Mail Template Creating and Editing an Email Definition

Using Base Object Properties

Customizing Email Signatures

Password Policies

Predefined Password Policies Editing Password Policies

General Master Data for a Password Policy Policy Settings Character Sets for Passwords

Custom Scripts for Password Requirements

Script for Checking a Password Script for Generating a Password

Restricted Passwords Testing a Password Testing Generating a Password Assigning a Password Policy

Entering Employee Master Data

General Employee Master Data Organizational Employee Master Data Address Data Miscellaneous Employee Master Data

Employee's Central User Account Employee's Central Password

Change Password Question Mutual Aid for Resetting Passwords

Employee's Default Email Address Disabling and Deleting Employees

Temporarily Deactivating Employees Permanently Deactivating Employees

Re-enable an Employee

Deferred Deletion of Employees

Assigning Company Resources to Employees

Assigning Employees to Departments, Cost Centers and Locations Assigning Employees to Business Roles Adding Employees to IT Shop Custom Nodes Assigning Application Roles to Employees Assigning Resources Directly to Employees Assigning Applications Directly to Employees Assigning System Roles Directly to Employees

Origin of an Employee's Roles and Entitlements Analyzing Role Memberships and Employee Assignments Mapping Multiple Employee Identities Limited Access to One Identity Manager

Changing the Certification Status of an Employee

Additional Tasks for Managing Employees

Employee Overview Manually Assigning User Accounts to Employees Entering Calls for an Employee Assigning Extended Properties

Determining an Employee‘s Language Determining an Employee‘s Working Hours Employee Reports

Managing Devices and Workdesks

Base Data for Device Management

General Master Data for a Device Model Inventory Data for a Device Model

Business Partners Device status Workdesk Status Workdesk Type

Setting up a Device

General Master Data for Devices Device Networking Data

Assigning Company Resources to Devices

Assigning Devices to Departments, Cost Centers and Locations Assigning Devices to Business Roles

Additional Tasks for Managing Devices

Overview of Devices Assigning Service Agreements and Enter Calls

How to Set up a Workdesk

General Master Data for a Workdesk Workdesk Location Information Additional Information about a Workdesk

Assigning Company Resources to Workdesks

Assigning Workdesks to Departments, Cost Centers and Locations Assigning Workdesks to Business Roles Assigning Applications Directly to Workdesks Assigning System Roles Directly to Workdesks

Additional Tasks for Managing Workdesks

Workdesk Overview Assigning Devices to Workdesks Assigning Employees to Workdesks Assigning Service Agreements and Enter Calls

Asset Data for Devices

Basic Data for Asset Management

Asset classes Asset types

Data for Investments and Investment Plans Editing Device Asset Data

Master Data for Asset Data Commercial Data

Managing Resources

One Identity Manager Users for Managing Resources Base Data for Resources

Resource Types Processing status

Default Processing Status

Editing Resources

General Master Data for a Resource

Assigning Resources to Employees

Assigning Employees to Departments, Cost Centers and Locations Assigning Resources to Business Roles Assigning Resources Directly to Employees Adding Resources to the IT Shop Adding Resources to System Roles

Additional Tasks for Managing Resources

Resource Overview Assigning Extended Properties to Resources

Editing Multi Request Resources

Multi-Request Resource Master Data

Assigning Multi Request Resources to Employees

Adding Multi Request Resources to the IT Shop

Reports about Resources

Set up Extended Properties

One Identity Manager Users for Managing Extended Properties Create Property Groups Edit Extended Properties

Extended Property Master Data Specifying Scoped Boundaries

Additional Tasks for Managing Extended Properties

Extended Property Overview Assign Objects Assigning Property Groups

Appendix: Configuration Parameters for Managing Departments, Cost Centers and Locations Appendix: Configuration Parameters for Managing Applications Appendix: Configuration Parameters for Managing Devices and Workdesks Appendix: Authentication Modules for Logging into the One Identity Manager

Data for Investments and Investment Plans

Managing Devices and Workdesks > Asset Data for Devices > Data for Investments and Investment Plans

Data for Investments and Investment Plans

Enter the data for investments and investment plans and assign then to devices.

To edit an investment

Select the category Devices & Workdesks | Investments.
Select an investments in the result list. Select Change master data in the task view.

- OR -

Click in the result list toolbar.

Edit the following master data.

Table 66: Master Data for Investments
Property	Description
Investment	Name of the investment.
Date	Date of investment.
Investment manager	Employee responsible for this investment.
Description	Spare text box for additional explanation.
Remarks	Spare text box for additional explanation.

Save the changes.

Related Topics

General Master Data for Devices

Editing Device Asset Data

Managing Devices and Workdesks > Asset Data for Devices > Editing Device Asset Data

Editing Device Asset Data

To enter asset information for a device

Select the category Devices & Workdesks | <filter>.
Select the device in the result list.
Select Edit asset data.
Save the changes.

Detailed information about this topic

Master Data for Asset Data

Managing Devices and Workdesks > Asset Data for Devices > Editing Device Asset Data > Master Data for Asset Data

Master Data for Asset Data

Enter the following master data for the asset data of a device.

Table 67: Device Asset Data
Property	Description
Asset number	Number of the asset in the bookkeeping.
Asset	Asset.
Storage class	Asset class.
Storage type	Asset type.
Device status	The device's status.
Enabling	Date for enabling the asset or leasing begin, respectively.
Deactivation	Date for disabling the asset or end of lease, respectively.
Replacement value	Value for replacing with a new device.
Depreciated value	Depreciation value for the device.
Company owned	Specifies whether the device is owned by the company.
Leased	Specifies whether the device is leased.
Invoice number	Invoice number of the purchase.
PSP character string	Asset PSP as character string.
Last inventory run	Date of last inventory.
Primary cost center	Cost center. Company resources can be inherited by a device through these primary assignments if One Identity Manager is appropriately configured.
Serial number	Serial number of the device.
Delivery remarks	Spare text box for additional explanation.
Inventory remarks	Spare text box for additional explanation.
Primary location	Location. Company resources can be inherited by a device through these primary assignments if One Identity Manager is appropriately configured.
Primary department	Department. Company resources can be inherited by a device through these primary assignments if One Identity Manager is appropriately configured.

Related Topics

Commercial Data

Managing Devices and Workdesks > Asset Data for Devices > Editing Device Asset Data > Commercial Data

Commercial Data

Enter the following asset data for a device.

NOTE: Prices are given to 2 decimal places by default. The number of comma can be modified in the Designer.

Table 68: Device Asset Data
Property	Description
Acquisition date	Date of purchase.
Delivery date	Date of delivery.
Delivery voucher number	Delivery voucher number.
Warranty	Warranty expiry date.
Warranty number	Warranty number.
Setup date	Date of going into operation.
Owner	Leasing company.
Supplier	Name of supplier.
Manufacturer	Name of manufacturer.
Purchase price	Purchase price.
Internal price	Internal price.
Sales price	Sales price.
Currency	Currency unit
Inventory note	Spare text box for additional explanation.
Withdrawal date	Date for writing off the device.
Leasing fee	Leasing fee.
Internal transfer price	Internal transfer price.
Depreciation month	Depreciation in months

Related Topics

Business Partners

Related Documents

© 2019 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy