Identity Manager 8.0 - Identity Management Base Module Administration Guide

Table of Contents

Basics for Mapping Company Structures in One Identity Manager

Hierarchical Role Structure Basics

Direction of Inheritance within a Hierarchy Discontinuing Inheritance

Basics for Assigning Company Resources

Direct Assignment Indirect Assignment

Secondary Assignment Primary Assignment

Assigning through Dynamic Roles Assigning through IT Shop Requests

Basics for Calculating Inheritance

Calculating Inheritance through Hierarchical Roles Calculation of Assignments

Preparing Hierarchical Roles for Company Resource Assignments

Possible Assignments of Company Resources through Roles Permit Assignments of Employees, Devices, Workdesks and Company Resources Using Roles to Limit Inheritance Inheritance Exclusion: Specifying Conflicting Roles

Managing Departments, Cost Centers and Locations

One Identity Manager Users for Organizations Base Data for Structuring Departments, Cost Centers and Locations

Roles Classes Role Types Functional areas Attestors Approvers and Approvers (IT)

Editing Departments

General Master Data for a Department Contact Data for Departments Functional Area and Risk Assessment

Editing Cost Centers

General Master Data for Cost Center Functional Area and Risk Assessment

Editing Locations

General Master Data for a Location Location Address Information Configuring a Location's Network Directions to Location Functional Area and Risk Assessment

Assigning Employees, Devices and Workdesks to Departments, Cost Centers and Locations Assigning Company Resources to Departments, Cost Centers and Locations Setting Up IT Operating Data

Modifying IT Operating Data

Additional Tasks for Managing Departments, Cost Centers and Locations.

Creating Dynamic Roles for Departments, Cost Centers and Locations Assign Organizations Specifying Inheritance Exclusion for Roles Specify Role Relations

Reports about Departments, Cost Centers and Locations

Working with Dynamic Roles

Editing Dynamic Roles

Dynamic Role Master Data

Test Condition of a Dynamic Role Calculating Role Memberships Additional Tasks for Dynamic Roles

Dynamic Role Overview Start Immediate Recalculation of Role Memberships

Employee Administration

One Identity Manager Users for Employee Administration Basic Configuration Data for Employees

Business Partners Creating Custom Mail Templates for Notifications

General Properties of a Mail Template Creating and Editing an Email Definition

Using Base Object Properties

Customizing Email Signatures

Password Policies

Predefined Password Policies Editing Password Policies

General Master Data for a Password Policy Policy Settings Character Sets for Passwords

Custom Scripts for Password Requirements

Script for Checking a Password Script for Generating a Password

Restricted Passwords Testing a Password Testing Generating a Password Assigning a Password Policy

Entering Employee Master Data

General Employee Master Data Organizational Employee Master Data Address Data Miscellaneous Employee Master Data

Employee's Central User Account Employee's Central Password

Change Password Question Mutual Aid for Resetting Passwords

Employee's Default Email Address Disabling and Deleting Employees

Temporarily Deactivating Employees Permanently Deactivating Employees

Re-enable an Employee

Deferred Deletion of Employees

Assigning Company Resources to Employees

Assigning Employees to Departments, Cost Centers and Locations Assigning Employees to Business Roles Adding Employees to IT Shop Custom Nodes Assigning Application Roles to Employees Assigning Resources Directly to Employees Assigning Applications Directly to Employees Assigning System Roles Directly to Employees

Origin of an Employee's Roles and Entitlements Analyzing Role Memberships and Employee Assignments Mapping Multiple Employee Identities Limited Access to One Identity Manager

Changing the Certification Status of an Employee

Additional Tasks for Managing Employees

Employee Overview Manually Assigning User Accounts to Employees Entering Calls for an Employee Assigning Extended Properties

Determining an Employee‘s Language Determining an Employee‘s Working Hours Employee Reports

Managing Devices and Workdesks

Base Data for Device Management

General Master Data for a Device Model Inventory Data for a Device Model

Business Partners Device status Workdesk Status Workdesk Type

Setting up a Device

General Master Data for Devices Device Networking Data

Assigning Company Resources to Devices

Assigning Devices to Departments, Cost Centers and Locations Assigning Devices to Business Roles

Additional Tasks for Managing Devices

Overview of Devices Assigning Service Agreements and Enter Calls

How to Set up a Workdesk

General Master Data for a Workdesk Workdesk Location Information Additional Information about a Workdesk

Assigning Company Resources to Workdesks

Assigning Workdesks to Departments, Cost Centers and Locations Assigning Workdesks to Business Roles Assigning Applications Directly to Workdesks Assigning System Roles Directly to Workdesks

Additional Tasks for Managing Workdesks

Workdesk Overview Assigning Devices to Workdesks Assigning Employees to Workdesks Assigning Service Agreements and Enter Calls

Asset Data for Devices

Basic Data for Asset Management

Asset classes Asset types

Data for Investments and Investment Plans Editing Device Asset Data

Master Data for Asset Data Commercial Data

Managing Resources

One Identity Manager Users for Managing Resources Base Data for Resources

Resource Types Processing status

Default Processing Status

Editing Resources

General Master Data for a Resource

Assigning Resources to Employees

Assigning Employees to Departments, Cost Centers and Locations Assigning Resources to Business Roles Assigning Resources Directly to Employees Adding Resources to the IT Shop Adding Resources to System Roles

Additional Tasks for Managing Resources

Resource Overview Assigning Extended Properties to Resources

Editing Multi Request Resources

Multi-Request Resource Master Data

Assigning Multi Request Resources to Employees

Adding Multi Request Resources to the IT Shop

Reports about Resources

Set up Extended Properties

One Identity Manager Users for Managing Extended Properties Create Property Groups Edit Extended Properties

Extended Property Master Data Specifying Scoped Boundaries

Additional Tasks for Managing Extended Properties

Extended Property Overview Assign Objects Assigning Property Groups

Appendix: Configuration Parameters for Managing Departments, Cost Centers and Locations Appendix: Configuration Parameters for Managing Applications Appendix: Configuration Parameters for Managing Devices and Workdesks Appendix: Authentication Modules for Logging into the One Identity Manager

Additional Tasks for Managing Extended Properties

Set up Extended Properties > Additional Tasks for Managing Extended Properties

Additional Tasks for Managing Extended Properties

After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.

Extended Property Overview

Assigning Property Groups

Extended Property Overview

Set up Extended Properties > Additional Tasks for Managing Extended Properties > Extended Property Overview

Extended Property Overview

Use this task to obtain an overview of the most important information about an extended property. For this you need to take into account the affiliation of the extended property to the different One Identity Manager objects.

To obtain an overview of an extended property

Select the category Entitlements| Basic configuration data | Extended properties | <property group>.
Select the extended property in the result list.
Select Extended property overview in the task view.

To obtain an overview of a property group

Select the category Entitlements | Basic configuration data | Extended properties.
Select a property group in the result list.
Select the task Property group overview in the task view.

Assign Objects

Set up Extended Properties > Additional Tasks for Managing Extended Properties > Assign Objects

Assign Objects

You can assign extended properties to company resources, hierarchical roles and employees.

To assign objects to an extended property

Select the category Entitlements| Basic configuration data | Extended properties | <property group>.
Select the extended property in the result list.
Select Assign objects in the task view.
Select the desired object type in Select object type.
The object belonging to the object types are displayed on the form.
Assign objects in Add assignments.
- OR -

Remove objects in Remove assignments.
Save the changes.

Assigning Property Groups

Set up Extended Properties > Additional Tasks for Managing Extended Properties > Assigning Property Groups

Assign Property Groups

Each extended property must be assigned to at least one property group. Furthermore, you can assign the extended properties to any other property groups.

To assign an extended property to a property group

Select the category Entitlements| Basic configuration data | Extended properties | <property group>.
Select the extended property in the result list.
Select Assign property groups in the task view.
Assign property groups in Add assignments.
- OR -

Remove property groups in Remove assignments.
Save the changes.

Related Topics

Create Property Groups

Related Documents

© 2019 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy