Identity Manager 8.0 - Identity Management Base Module Administration Guide

Basics for Mapping Company Structures in One Identity Manager Managing Departments, Cost Centers and Locations Working with Dynamic Roles Employee Administration
One Identity Manager Users for Employee Administration Basic Configuration Data for Employees Entering Employee Master Data Employee's Central User Account Employee's Central Password Employee's Default Email Address Disabling and Deleting Employees Assigning Company Resources to Employees Origin of an Employee's Roles and Entitlements Analyzing Role Memberships and Employee Assignments Mapping Multiple Employee Identities Limited Access to One Identity Manager Additional Tasks for Managing Employees Determining an Employee‘s Language Determining an Employee‘s Working Hours Employee Reports
Managing Devices and Workdesks Managing Resources Set up Extended Properties Appendix: Configuration Parameters for Managing Departments, Cost Centers and Locations Appendix: Configuration Parameters for Managing Applications Appendix: Configuration Parameters for Managing Devices and Workdesks Appendix: Authentication Modules for Logging into the One Identity Manager

Managing Resources

Managing Resources

The One Identity Manager not only offers the possibility to map IT resources but also non-IT resources such as mobile telephones, desks, company cars and keys i.e, everything that is necessary to create an efficient working environment for an employee. You can assign resources directly to an employee or through classification into hierarchical roles in the One Identity Manager. Similarly, you can resources request for an employee through the IT Shop.

Resources are divided up from a functional point of view.

Table 69: Resource Types
Type Description Table
Resources Resources that an employee (workstation, device) may own just once.

The resources can be requested in the IT Shop just once. The resources are assigned to the employees after approval has been granted. They remain assigned until the request is canceled. You can request them again a later point.

Examples: phones, company cars

QERResource
Multi-request resources Resources that can be requested more than once in the IT Shop. Requests are automatically canceled once approved. The resources are not explicitly assigned to employees.

Example: consumables, like pens, printer paper

QERReuse
Multi-requestable/unsubscribable resources Resources which an employee can request more than once in the IT Shop but must return them explicitly once they are no longer needed. The resources are assigned to the employees after approval has been granted. They remain assigned until the request is canceled.

Example: printer, monitor

QERReuseUS
Detailed information about this topic

One Identity Manager Users for Managing Resources

One Identity Manager Users for Managing Resources

The following users are used for user administration.

Table 70: Users
User Task

Administrators for the IT Shop.

Administrators must be assigned to the application role Request & Fulfillment | IT Shop | Administrators.

Users with this application role:

  • Edit the resources and assign them to IT Shop structures and employees.
One Identity Manager administrators
  • Create customized permissions groups for application roles for role-based login to administration tools in the Designer, as required.
  • Create system users and permissions groups for non-role based login to administration tools, as required.
  • Enable or disable additional configuration parameters in the Designer, as required.
  • Create custom processes in the Designer, as required.
  • Create and configures schedules, as required.
  • Create and configure password policies, as required.

Base Data for Resources

Base Data for Resources

The following basic data is required for managing resources.

  • Resource Types

    You can use resource types to group resources.

  • Processing status

    After a resource has been assigned, further manual processing may be necessary. You can define processing statuses in the One Identity Manager that reflect the status of each manual processing step.

  • Extended properties

    Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.

Detailed information about this topic

Resource Types

Resource Types

You can use resource types to group resources.

To define resource types

  1. Select the category Entitlements | Basic configuration data | Resource types.
  2. Select the resource type in the result list. Select Change master data in the task view.

    - OR -

    Click in the result list toolbar.

  3. Enter a name and description for the resource type.
  4. Save the changes.
Related Documents