Chat now with support
Chat with Support

Identity Manager 8.0 - IT Shop Administration Guide

Setting up an IT Shop Solution
One Identity Manager Users in the IT Shop Putting the IT Shop into Operation Requestable Products Preparing Products for Requesting Assigning and Removing Products Preparing the IT Shop for Multi-factor Authentication Assignment Requests and Delegating Creating IT Shop Requests from Existing User Accounts, Assignments and Role Memberships Adding Groups Automatically to the IT Shop
Approval Processes for IT Shop Requests
Editing Approval Policies Approval Workflows Determining Effective Approval Policies Selecting Responsible Approvers Request Risk Analysis Testing Requests for Rule Compliance Approving Requests from an Approver Automatic Request Approval Obtaining Other Information about Requests by an Approver Appointing Other Approvers Setting up an Approval Step Approvers cannot be Established Automatic Approval on Timeout Abort Request on Timeout Approval through Chief Approval Team Approving Requests with Terms of Use Using Default Approval Processes
Request Sequence Managing an IT Shop
IT Shop Base Data Setting up IT Shop Structures Setting Up a Customer Node Deleting IT Shop Structures Templates for Automatically Filling the IT Shop Creating Custom Mail Templates for Notifications request templates
Default Solution for Requesting System Entitlements Error Handling Appendix: Configuration Parameters for the IT Shop Appendix: Request Statuses Appendix: Example of Request Results

Reports about Service Items

Reports about Service Items

One Identity Manager makes various reports available containing information about the selected base object and its relations to other One Identity Manager database objects. The following reports are available for service items.

 NOTE: Other sections may be available depending on the which modules are installed.
Table 8: Reports about Service Items
Report Description
Overview of all Assignments

This report finds all roles containing employees with the selected service item.

Related Topics

Overview of all Assignments

Overview of all Assignments

The report "Overview of all Assignments" is displayed for certain objects, for example, permissions, compliance rules or roles. The report finds all the roles, for example, departments, cost centers, locations, business roles and IT Shop structures in which there are employee who own the selected base object. In this case, direct as well as indirect base object assignments are included.

Example
  • If the report is created for a resource, all roles are determined in which there are employees with this resource.
  • If the report is created for a group, all roles are determined in which there are employees with this group.
  • If the report is created for a compliance rule, all roles are determined in which there are employees with this compliance rule.
  • If the report is created for a department, all roles are determined in which employees of the selected department are also members.
  • If the report is created for a business role, all roles are determined in which employees of the selected business role are also members.

To display detailed information about assignments

  • To display the report, select the base object from the navigation or the result list and select the report Overview of all assignments.
  • Use the Used by button in the report's toolbar to select the role class (department, location, business role or IT Shop structure) for which you determine if roles exist in which there are employees with the selected base object.

    All the roles of the selected role class are shown. The color coding of elements identifies the role in which there are employees with the selected base object. The meaning of the report control elements is explained in a separate legend. In the report's toolbar, click to open the legend.

  • Double-click a control to show all child roles belonging to the selected role.
  • By clicking the button in a role's control, you display all employees in the role with the base object.
  • Use the small arrow next to to start a wizard that allows you to bookmark this list of employee for tracking. This creates a new business role to which the employees are assigned.

Figure 4: Toolbar for Report "Overview of all assignments"

Table 9: Meaning of Icons in the Report Toolbar
Icon Meaning
Show the legend with the meaning of the report control elements
Saves the current report view as a graphic.
Selects the role class used to generate the report.

Displays all roles or only the affected roles.

Entering Service Categories

Entering Service Categories

You can group individual service items into service categories to create a service catalog.

To edit service categories

  1. Select the category IT Shop | Basic configuration data | Server.

    - OR -

    Select the category IT Shop | Service catalog.

  2. Select the service category in the result list.
  3. Select Change master data in the task view.
  4. Edit the service category's master data.
  5. Save the changes.

Service Category Master Data

Service Category Master Data

Enter the following master data for a service category. If you add a new service category, you must fill out the compulsory fields.

Table 10: General Master Data for a Service Category
Master Data Meaning
Service category The service item’s name.
Special service category Specifies whether the service category has a special purpose.
Parent service category If you want to have service categories in a hierarchical structure, select a parent service category from the list.
Product owners Assign a Request & Fulfillment | IT Shop | Product owners application role.

Product owners can be used as approvers in a defined approval process within the IT Shop. They can decide on approval of the service item request.

To create a new application role, click . Enter the application role name and assign a parent application role..

Attestors Assign Request & Fulfillment | IT Shop | Attestors to an application role.

The members of this application role can chosen as attestor in an attestation procedure.

To create a new application role, click . Enter the application role name and assign a parent application role.

Approval policies Approval policies used to determine the approver when the service item is requested from a service category in the IT Shop.
Request property Select the group for defining extended properties for a request. These request properties are displayed in the Web Portal depending on the configuration, requester or approver.
Purchase price, sales price, internal price, currency Enter the required price information for the service category accounting.
Sort order Customer specific criteria for sorting assigned service items.
Description Spare text box for additional explanation.
Picture Picture of this service item in the database. Select the path where the picture is stored.
Spare fields no. 1 - Spare field no. 10

Additional company specific information. Use the Designer to customize display names, formats and templates for the input fields.

Detailed information about this topic
Related Topics
  • One Identity Manager Attestation Administration Guide.
Related Documents