Basics for Mapping Company Structures in One Identity Manager
Hierarchical Role Structure Basics
Basics for Assigning Company Resources
Managing Departments, Cost Centers and Locations
Direct Assignment
Indirect Assignment
Assigning through Dynamic Roles
Assigning through IT Shop Requests
Basics for Calculating Inheritance
Preparing Hierarchical Roles for Company Resource Assignments
One Identity Manager Users for Organizations
Base Data for Structuring Departments, Cost Centers and Locations
Editing Departments
Working with Dynamic Roles
General Master Data for a Department
Contact Data for Departments
Functional Area and Risk Assessment
Editing Cost Centers
Editing Locations
General Master Data for a Location
Location Address Information
Configuring a Location's Network
Directions to Location
Functional Area and Risk Assessment
Assigning Employees, Devices and Workdesks to Departments, Cost Centers and Locations
Assigning Company Resources to Departments, Cost Centers and Locations
Setting Up IT Operating Data
Additional Tasks for Managing Departments, Cost Centers and Locations.
Creating Dynamic Roles for Departments, Cost Centers and Locations
Assign Organizations
Specifying Inheritance Exclusion for Roles
Specify Role Relations
Reports about Departments, Cost Centers and Locations
Editing Dynamic Roles
Test Condition of a Dynamic Role
Calculating Role Memberships
Additional Tasks for Dynamic Roles
Employee Administration
One Identity Manager Users for Employee Administration
Basic Configuration Data for Employees
Managing Devices and Workdesks
Business Partners
Creating Custom Mail Templates for Notifications
Entering Employee Master Data
General Properties of a Mail Template
Creating and Editing an Email Definition
Customizing Email Signatures
Password Policies
General Employee Master Data
Organizational Employee Master Data
Address Data
Miscellaneous Employee Master Data
Employee's Central User Account
Employee's Central Password
Employee's Default Email Address
Disabling and Deleting Employees
Temporarily Deactivating Employees
Permanently Deactivating Employees
Deferred Deletion of Employees
Assigning Company Resources to Employees
Assigning Employees to Departments, Cost Centers and Locations
Assigning Employees to Business Roles
Adding Employees to IT Shop Custom Nodes
Assigning Application Roles to Employees
Assigning Resources Directly to Employees
Assigning Applications Directly to Employees
Assigning System Roles Directly to Employees
Origin of an Employee's Roles and Entitlements
Analyzing Role Memberships and Employee Assignments
Mapping Multiple Employee Identities
Limited Access to One Identity Manager
Additional Tasks for Managing Employees
Employee Overview
Manually Assigning User Accounts to Employees
Entering Calls for an Employee
Assigning Extended Properties
Determining an Employee‘s Language
Determining an Employee‘s Working Hours
Employee Reports
Base Data for Device Management
Setting up a Device
Assigning Company Resources to Devices
Additional Tasks for Managing Devices
How to Set up a Workdesk
Managing Resources
General Master Data for a Workdesk
Workdesk Location Information
Additional Information about a Workdesk
Assigning Company Resources to Workdesks
Assigning Workdesks to Departments, Cost Centers and Locations
Assigning Workdesks to Business Roles
Assigning Applications Directly to Workdesks
Assigning System Roles Directly to Workdesks
Additional Tasks for Managing Workdesks
Workdesk Overview
Assigning Devices to Workdesks
Assigning Employees to Workdesks
Assigning Service Agreements and Enter Calls
Asset Data for Devices
One Identity Manager Users for Managing Resources
Base Data for Resources
Editing Resources
Assigning Resources to Employees
Set up Extended Properties
Assigning Employees to Departments, Cost Centers and Locations
Assigning Resources to Business Roles
Assigning Resources Directly to Employees
Adding Resources to the IT Shop
Adding Resources to System Roles
Additional Tasks for Managing Resources
Editing Multi Request Resources
Assigning Multi Request Resources to Employees
Reports about Resources
One Identity Manager Users for Managing Extended Properties
Create Property Groups
Edit Extended Properties
Additional Tasks for Managing Extended Properties
Appendix: Configuration Parameters for Managing Departments, Cost Centers and Locations
Appendix: Configuration Parameters for Managing Applications
Appendix: Configuration Parameters for Managing Devices and Workdesks
Appendix: Authentication Modules for Logging into the One Identity Manager
Managing Resources
Managing Resources
Managing Resources
The One Identity Manager not only offers the possibility to map IT resources but also non-IT resources such as mobile telephones, desks, company cars and keys i.e, everything that is necessary to create an efficient working environment for an employee. You can assign resources directly to an employee or through classification into hierarchical roles in the One Identity Manager. Similarly, you can resources request for an employee through the IT Shop.
Resources are divided up from a functional point of view.
| Type | Description | Table |
|---|---|---|
| Resources | Resources that an employee (workstation, device) may own just once.
The resources can be requested in the IT Shop just once. The resources are assigned to the employees after approval has been granted. They remain assigned until the request is canceled. You can request them again a later point. Examples: phones, company cars |
QERResource |
| Multi-request resources | Resources that can be requested more than once in the IT Shop. Requests are automatically canceled once approved. The resources are not explicitly assigned to employees.
Example: consumables, like pens, printer paper |
QERReuse |
| Multi-requestable/unsubscribable resources | Resources which an employee can request more than once in the IT Shop but must return them explicitly once they are no longer needed. The resources are assigned to the employees after approval has been granted. They remain assigned until the request is canceled.
Example: printer, monitor |
QERReuseUS |
Detailed information about this topic
- Editing Resources
- Assigning Resources to Employees
- Editing Multi Request Resources
- Assigning Multi Request Resources to Employees
- Reports about Resources
One Identity Manager Users for Managing Resources
One Identity Manager Users for Managing Resources
The following users are used for user administration.
| User | Task |
|---|---|
|
Administrators for the IT Shop. |
Administrators must be assigned to the application role Request & Fulfillment | IT Shop | Administrators. Users with this application role:
|
| One Identity Manager administrators |
|
Base Data for Resources
The following basic data is required for managing resources.
- Resource Types
You can use resource types to group resources.
- Processing status
After a resource has been assigned, further manual processing may be necessary. You can define processing statuses in the One Identity Manager that reflect the status of each manual processing step.
- Extended properties
Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.
Detailed information about this topic
Resource Types
Resource Types
You can use resource types to group resources.
To define resource types
- Select the category Entitlements | Basic configuration data | Resource types.
- Select the resource type in the result list. Select Change master data in the task view.
- OR -
Click
in the result list toolbar.
- Enter a name and description for the resource type.
- Save the changes.