Managing an IT Shop
Managing an IT Shop
| Configuration parameter | Meaning |
|---|---|
| QER\ITShop | Preprocessor relevant configuration parameter to control the component parts for the IT Shop. Changes to the parameter require recompiling the database.
If the parameter is set, the IT Shop components are available. |
You can use the supplied default shop "Identity & Access Lifecycle" depending on your company structure and extend it or set up your own IT Shop solution. Set up different IT Shop structures for your custom IT Shop solution. Specify which employees are authorized to make request in the shops.
To set up an IT Shop solution with the help of the IT Shop Wizard.
- Select the category My One Identity Manager | IT Shop wizards | Create shop.
The wizard includes the most important configuration stages for setting up an IT Shop. After the wizard has concluded, more configuration stages are required.
IT Shop structures such as shopping centers, shops and shelves are mapped in the category IT Shop | IT Shop. An IT Shop solution is displayed hierarchically.
The following sections describe the procedure for manually setting up an IT Shop.
IT Shop Base Data
IT Shop Base Data
Various base data is required to construct an IT Shop:
| Role types: | Role Types |
| Approval policies: | Editing Approval Policies |
| Approval workflows: | Approval Workflows |
| Approval procedures: | Setting up Approval Procedures |
| Processing status: | Processing status |
| Attestors: | Attestors |
| Product owners: | Product owners |
| Mail templates: | Creating Custom Mail Templates for Notifications |
| Business partners: | Business Partners |
| Functional areas: | Functional areas |
| Service categories: | Entering Service Categories |
| Request properties: | Entering Product Specific Request Properties |
| Tags: | Entering Tags |
| Roles classes: | Roles Classes |
| Reasons: | Standard Reasons |
Role Types
Role Types
Create role types in order to classify roles. You can use role types to specify inheritance of approval policies within an IT Shop. To do this, assign role types to shelves and approval policies. For more information, see Determining Effective Approval Policies.
You can also assign role types if you want to apply further criteria to distinguish between shops. However, role types that are assigned to shops have no influence over the inheritance of approval policies.
To edit a role type
- Select the category IT Shop | Basic configuration data | Role types.
- Select the role type in the result list. Select Change master data in the task view.
- OR -
Click
in the result list toolbar.
- Enter a name and detailed description for the role type.
- Save the changes.
Processing status
Processing status
After a resource has been assigned, further manual processing may be necessary. You can define processing statuses in the One Identity Manager that reflect the status of each manual processing step. The appropriate processing status is set for the request depending on whether the approval decision was negative or positive. The appropriate processing status is set for the request depending on the result of the approval decision.
To edit processing statuses
- Select the category
- Select a processing status in the result list. Select Change master data in the task view.
- OR -
Click
- Edit the processing status's master data.
- Save the changes.
Enter the following properties for a processing status.
| Property | Description |
|---|---|
| Processing status | Name of the processing status. |
| Success | The processing status marks the success of the processing step. |
| Closed | The processing status marks whether processing is complete. |
| Sort order | Order in which processing status can be set. |
| Description | Spare text box for additional explanation. |