Chat now with support
Chat with Support

Identity Manager 8.0 - IT Shop Administration Guide

Setting up an IT Shop Solution
One Identity Manager Users in the IT Shop Putting the IT Shop into Operation Requestable Products Preparing Products for Requesting Assigning and Removing Products Preparing the IT Shop for Multi-factor Authentication Assignment Requests and Delegating Creating IT Shop Requests from Existing User Accounts, Assignments and Role Memberships Adding Groups Automatically to the IT Shop
Approval Processes for IT Shop Requests
Editing Approval Policies Approval Workflows Determining Effective Approval Policies Selecting Responsible Approvers Request Risk Analysis Testing Requests for Rule Compliance Approving Requests from an Approver Automatic Request Approval Obtaining Other Information about Requests by an Approver Appointing Other Approvers Setting up an Approval Step Approvers cannot be Established Automatic Approval on Timeout Abort Request on Timeout Approval through Chief Approval Team Approving Requests with Terms of Use Using Default Approval Processes
Request Sequence Managing an IT Shop
IT Shop Base Data Setting up IT Shop Structures Setting Up a Customer Node Deleting IT Shop Structures Templates for Automatically Filling the IT Shop Creating Custom Mail Templates for Notifications request templates
Default Solution for Requesting System Entitlements Error Handling Appendix: Configuration Parameters for the IT Shop Appendix: Request Statuses Appendix: Example of Request Results

Predefined Standard Reasons

One Identity Manager provides predefined standard reasons. These standard reasons are entered into the requestby automatic approval through One Identity Manager.

To display predefined standard reasons

  • Select the category IT Shop | Basic configuration data | Standard reasons | Predefined.

Setting up IT Shop Structures

Setting up IT Shop Structures

Depending on the company structure, you can optionally define shopping centers for your IT Shop solution where several shops can be bought together under one roof. Always add the shopping center to the top level of the IT Shop. Shopping centers may not be hierarchical.

Each shop contains a number of shelves that the customer can request products from. You can add a shop to the top level of the IT Shop or under a shopping center. Shops may not be hierarchical.

There are various products available for request on shelves. Shelves are set up under each shop.

 IMPORTANT: If a shop contains a large number of customer, the calculations in the IT Shop can cause a heavy load on the DBQueue Processor and therefore on the database server as well.

Structure the IT Shop such that no more than 30 000 customers can make requests in each shop! If necessary, set up your own shopping center with several shops and customer nodes.

To set up a shopping center, a shop or a shelf

  1. Select the category IT Shop | IT Shop.

  2. Click in the result list toolbar.

  3. Edit the shopping center, shop or shelf's master data.
  4. Save the changes.

General Master Data for a IT Shop Structure

General Master Data for an IT Shop Structure

Enter the following master data for a shopping center, a shop or a shelf:

Table 114: General Master Data for an IT Shop Structure
Property Description
IT Shop Nodes IT Shop structure name.
Internal name Internal IT Shop structure name.
IT Shop information Labels the type of IT Shop structure. The IT Shop structure is regulated by this data. Select "Shopping center", "Shop" or "Shelf" from the menu.

The menu is only displayed when a new IT Shop structure is added.

Role type
Shopping center Irrelevant.
Shop You can use role types to classify shops further. Role types assigned to shops have no influence over the inheritance of approval policies.

Add the required role types in IT Shop | Basic configuration data | Roles types. For more information, see Role Types.

Shelf

You can use role types to specify inheritance of approval policies within an IT Shop. For more information, see Determining Effective Approval Policies.

Add the required role types in IT Shop | Basic configuration data | Roles types. For more information, see Role Types.

Shelf template You can use shelf templates to fill shops automatically. For more information, see Templates for Automatically Filling the IT Shop.
Shopping center Select a shopping center template for a shopping center. A shopping center template can not be assigned until the shopping center has been saved in the database .
Shop Not relevant
Shelf A shelf template cross reference is entered for shelves generated when shops are filled automatically. Shelf templates are not assigned automatically.
Parent IT Shop node

A parent IT Shop node is necessary for the hierarchical design of the IT Shop.

Shopping center Leave this field empty. Shopping centers always form the root node of an IT Shop.
Shop If the shop is at the top level of an IT Shop, this field stays empty.

If the shop is in a shopping center, select the respective shopping center. You can use this input field to add shops to shopping centers later.

Shelf Select the shop to which the shelf will be added.
Full name Full name of the IT Shop structure.
Location Assign a location. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.
Department Assign a department. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.
Cost center Assign a cost center. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.
Owner Specify the employee responsible for the IT Shop structure. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.
Deputy Specify a deputy owner. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.
Attestors Applications role whose members are authorized to approve attestation cases for this IT Shop structure.

To create a new application role, click . Enter the application role name and assign a parent application role.For more information, see Attestors.

 NOTE: This property is available if the Attestation Module is installed.
Description Spare text box for additional explanation.

Certification status

Certification status of the IT Shop structure. You can select the following certification statuses:

  • New – The IT Shop structure was newly added to the One Identity Manager database.
  • Certified – The IT Shop structure master daa was granted approval by the manager.
  • Denied – The IT Shop structure master data was denied approval by the manager.

User Defined Data for a IT Shop Structure

User Defined Data for a IT Shop Structure

Additional company specific information. Use the Designer to customize display names, formats and templates for the input fields.

Related Documents