Chat now with support
Chat with Support

Identity Manager 8.0 - IT Shop Administration Guide

Setting up an IT Shop Solution
One Identity Manager Users in the IT Shop Putting the IT Shop into Operation Requestable Products Preparing Products for Requesting Assigning and Removing Products Preparing the IT Shop for Multi-factor Authentication Assignment Requests and Delegating Creating IT Shop Requests from Existing User Accounts, Assignments and Role Memberships Adding Groups Automatically to the IT Shop
Approval Processes for IT Shop Requests
Editing Approval Policies Approval Workflows Determining Effective Approval Policies Selecting Responsible Approvers Request Risk Analysis Testing Requests for Rule Compliance Approving Requests from an Approver Automatic Request Approval Obtaining Other Information about Requests by an Approver Appointing Other Approvers Setting up an Approval Step Approvers cannot be Established Automatic Approval on Timeout Abort Request on Timeout Approval through Chief Approval Team Approving Requests with Terms of Use Using Default Approval Processes
Request Sequence Managing an IT Shop
IT Shop Base Data Setting up IT Shop Structures Setting Up a Customer Node Deleting IT Shop Structures Templates for Automatically Filling the IT Shop Creating Custom Mail Templates for Notifications request templates
Default Solution for Requesting System Entitlements Error Handling Appendix: Configuration Parameters for the IT Shop Appendix: Request Statuses Appendix: Example of Request Results

Managing an IT Shop

Managing an IT Shop

Table 103: Configuration Parameter for Setting Up an IT Shop
Configuration parameter Meaning
QER\ITShop Preprocessor relevant configuration parameter to control the component parts for the IT Shop. Changes to the parameter require recompiling the database.

If the parameter is set, the IT Shop components are available.

You can use the supplied default shop "Identity & Access Lifecycle" depending on your company structure and extend it or set up your own IT Shop solution. Set up different IT Shop structures for your custom IT Shop solution. Specify which employees are authorized to make request in the shops.

To set up an IT Shop solution with the help of the IT Shop Wizard.

  • Select the category My One Identity Manager | IT Shop wizards | Create shop.

    The wizard includes the most important configuration stages for setting up an IT Shop. After the wizard has concluded, more configuration stages are required.

IT Shop structures such as shopping centers, shops and shelves are mapped in the category IT Shop | IT Shop. An IT Shop solution is displayed hierarchically.

The following sections describe the procedure for manually setting up an IT Shop.

IT Shop Base Data

IT Shop Base Data

Various base data is required to construct an IT Shop:

Role types: Role Types
Approval policies: Editing Approval Policies
Approval workflows: Approval Workflows
Approval procedures: Setting up Approval Procedures
Processing status: Processing status
Attestors: Attestors
Product owners: Product owners
Mail templates: Creating Custom Mail Templates for Notifications
Business partners: Business Partners
Functional areas: Functional areas
Service categories: Entering Service Categories
Request properties: Entering Product Specific Request Properties
Tags: Entering Tags
Roles classes: Roles Classes
Reasons: Standard Reasons

Role Types

Role Types

Create role types in order to classify roles. You can use role types to specify inheritance of approval policies within an IT Shop. To do this, assign role types to shelves and approval policies. For more information, see Determining Effective Approval Policies.

You can also assign role types if you want to apply further criteria to distinguish between shops. However, role types that are assigned to shops have no influence over the inheritance of approval policies.

To edit a role type

  1. Select the category IT Shop | Basic configuration data | Role types.
  2. Select the role type in the result list. Select Change master data in the task view.

    - OR -

    Click in the result list toolbar.

  3. Enter a name and detailed description for the role type.
  4. Save the changes.

Processing status

Processing status

After a resource has been assigned, further manual processing may be necessary. You can define processing statuses in the One Identity Manager that reflect the status of each manual processing step. The appropriate processing status is set for the request depending on whether the approval decision was negative or positive. The appropriate processing status is set for the request depending on the result of the approval decision.

To edit processing statuses

  1. Select the category IT Shop | Basic configuration data | Processing status.
  2. Select a processing status in the result list. Select Change master data in the task view.

    - OR -

    Click in the result list toolbar.

  3. Edit the processing status's master data.
  4. Save the changes.

Enter the following properties for a processing status.

Table 104: General Master Data for a Processing Status
Property Description
Processing status Name of the processing status.
Success The processing status marks the success of the processing step.
Closed The processing status marks whether processing is complete.
Sort order Order in which processing status can be set.
Description Spare text box for additional explanation.
Related Documents