Chat now with support
Chat with Support

Identity Manager 8.0 - IT Shop Administration Guide

Setting up an IT Shop Solution
One Identity Manager Users in the IT Shop Putting the IT Shop into Operation Requestable Products Preparing Products for Requesting Assigning and Removing Products Preparing the IT Shop for Multi-factor Authentication Assignment Requests and Delegating Creating IT Shop Requests from Existing User Accounts, Assignments and Role Memberships Adding Groups Automatically to the IT Shop
Approval Processes for IT Shop Requests
Editing Approval Policies Approval Workflows Determining Effective Approval Policies Selecting Responsible Approvers Request Risk Analysis Testing Requests for Rule Compliance Approving Requests from an Approver Automatic Request Approval Obtaining Other Information about Requests by an Approver Appointing Other Approvers Setting up an Approval Step Approvers cannot be Established Automatic Approval on Timeout Abort Request on Timeout Approval through Chief Approval Team Approving Requests with Terms of Use Using Default Approval Processes
Request Sequence Managing an IT Shop
IT Shop Base Data Setting up IT Shop Structures Setting Up a Customer Node Deleting IT Shop Structures Templates for Automatically Filling the IT Shop Creating Custom Mail Templates for Notifications request templates
Default Solution for Requesting System Entitlements Error Handling Appendix: Configuration Parameters for the IT Shop Appendix: Request Statuses Appendix: Example of Request Results

Assigning Service Items

Assigning Service Items

Assign service items a tag so they can be used as search terms in the Web Portal. The Web Portal finds all the service items assigned to a tag.

To assign a tag to a service item

  1. Select IT Shop | Basic configuration data | Tags.
  2. Select a tag in the result list.
  3. Select Assign service items in the task view.
  4. Double-click on the service item in Add assignments to assign it to the tag.

    – OR –

    Double-click on the service item in Remove assignments to remove the assignment.

  5. Save the changes.

Assigning and Removing Products

Once you have prepared the product to be requested, assign it to a shelf or a shelf template. A shelf has several tasks available for assigning and removing products.

 NOTE: These tasks are only displayed if the options Assignments permitted or Direct assignments permitted are set on the role classes "IT Shop structure" or "IT Shop template".
Table 17: Tasks for Assigning and Removing Requestable Products
Products Task
Applications Assign application
Resources Assign resource
Multi-request resources

Assign resource

Multi-requestable/unsubscribable resources Assign resource
System roles Assign system roles
Groups of custom target systems Assign groups of custom target systems
Active Directory groups Assign Active Directory groups
SharePoint entitlements Assign SharePoint groups
Assign SharePoint roles
LDAP groups Assign LDAP groups
IBM Notes groups Assign Notes groups
SAP R/3 entitlements Assign BI analysis authorizations
Assign SAP groups
Assign SAP profiles
Assign SAP roles
Assign structural profiles
E-Business Suite entitlements Assign E-Business Suite authorizations
Subscribable reports Assign subscribable reports
Assign resources Assign resource
Detailed information about this topic

Assigning a Product

Assigning a Product

Table 18: Configuration Parameters for Creating Product Nodes
Configuration Parameter Description
QER\ITShop\LimitOfNodeCheck Maximum number of product nodes that can be generated by a DBQueue Processor run. Once this number has been exceeded, a task for generating the rest of the nodes is queued in the DBQueue.

There are different tasks available for assigning a single product from a shelf. The following example based on a resource shows you how to assign individual products.

To assign a resources to the "Identity & Access Lifecycle" as a product

  1. Select the category IT Shop | IT Shop | Identity & Access Lifecycle | Shelf: Identity Lifecycle.
  2. Select Assign resources in the task view.
  3. Assign resources in Add assignments.
  4. Save the changes.

Products are automatically assigned to shelves at the same time, if:

  • Groups are automatically added to the IT Shop
  • Rule template are used to set up the IT Shop

Use the DBQueue Processor inheritance mechanism and subsequent post-processing to create a separate product node for each assigned product within the shelf. These product nodes are displayed with the name of the product’s service item. If huge numbers of products are added in the IT Shop by automatic processes, you can specify how many product nodes are created in one DBQueue Processor run in the configuration parameter "QER\ITShop\LimitOfNodeCheck". Once this number has been exceeded, the task is closed and queued again in the DBQueue for generating the rest of the product nodes. By default, 500 objects are processed in one run.

Related Topics

Removing a Product

Removing a Product

There are different tasks available for removing a product from a shelf. In the following, we use the example of a resource to show how to remove a product.

To remove a resource from the "Identity Lifecycle" shelf

  1. Select the category IT Shop | IT Shop | Identity & Access Lifecycle | Shelf: Identity Lifecycle.
  2. Select Assign resources in the task view.
  3. Remove the resource from Remove assignments.
  4. Save the changes.

When you remove a product from a shelf, pending requests for the product are closed, approved requests are unsubscribed.

To remove a product from all shelves

  • Select Remove from all shelves in the task view.

    You will find the task on the master data form of the respective product, for example, a resource.

The task immediately removes product assignments to manually configured shelves and shelf templates. Then, the DBQueue Processor removes product assignments to shelves, based on a template definition. All assignments are unsubscribed if the product is a part of an assignment request.

 TIP: Before you execute this task, check the effects on system performance.
Related Documents