Identity Manager 8.0 - Web Portal User Guide

System entitlements

System entitlements map the objects that control access to target system resources in the target systems. A user account obtains the required permissions for accessing target system resources through its memberships in system entitlements. The following system entitlements are displayed, for example, under the "My Responsibilities" menu.

• Active Directory groups
• SAP groups
• SharePoint groups

You can run the following tasks in system entitlements, if you own them.

• View a variety of information about the system entitlement (in a Hyper View), its members, attestation cases and usage of the different role classes.
• Add a new owner role and assign a product owner to an Active Directory group if you are target system administrator. You can also edit the requestability of a Active Directory group.
• Change the properties of the entitlement.
• Add members to system entitlements.
• Obtain an overview of all groups that are members of a system entitlement.
• Analyze that state and compare attributes of the base object. You can perform this task in the historical data view.

To open the "System Entitlements" menu.

• Open the menu Responsibilities | My Responsibilities and click System Entitlements.

Detailed information about this topic

• Viewing Information
• Adding Memberships
• Viewing Entitlement Assignments
• Deleting Memberships
• Editing Master Data
• Attestations
• Owner
• New Owner Role
• Moving Responsibilities
• Usage
• Child Groups
• History
• Timeline
• Status comparison
• Statistics

Adding Memberships

You can add members to roles, organizations, and entitlements for which you are responsible and have the required access. This is an alternative to making a request for membership on behalf of an employee.

You can delete memberships as well as adding them.

To request new membership

1. Perform one of the following tasks.
   1. Under the System Entitlements menu, open Memberships for the desired system entitlement.
   2. Under the Business Roles menu, open Memberships for the desired business role .
   3. Under the System Roles menu, open Memberships for the desired system role.
   4. Under the Departments menu, open Memberships for the desired department.
   5. Under the Cost centers menu, open Memberships for the desired cost center.
   6. Under the Locations menu, open Memberships for the desired location.
   7. Under the Resources menu, open Memberships for the desired resources.
   8. Under the Multi-requestable/unsubscribable resources menu, open Memberships for the desired resource.
2. Click Request memberships.
3. Select the employees you want (multi select is permitted) and click Add to shopping cart.

   Your shopping cart appears. For more information, see Editing Requests.

Deleting Memberships

Deleting memberships is similar to a requests workflow. You can delete members from roles, organizations, and entitlements for which you are responsible and have the required access. The assignment is removed by the deletion process.

To delete a membership

1. Perform one of the following tasks.
   1. Under the System Entitlements menu, open Memberships for the desired system entitlement.
   2. Open the Business Roles menu for the desired business role and select Memberships.
   3. Open the System Roles menu for the desired system role and select Memberships.
   4. Open the Departments menu for the desired department and select Memberships.
   5. Open the Cost centers menu for the desired cost center and select Memberships.
   6. Open the Locations menu for the desired location and select Memberships.
   7. Open the Resources menu for the desired resources and select Memberships.
   8. Under the Multi-requestable/unsubscribable resources menu, open Memberships for the desired resource.
2. Click Delete memberships.

   This deletes the membership.

Editing Master Data

You edit master data in the System Entitlements menu, if you want to edit requestability settings.

To change the master data of a group managed by Active Roles

1. Open the menu System Entitlements and select the desired system entitlement managed by Active Roles.
2. Select Master data.
3. Perform one of the following tasks.
   1. Enable Only for use in IT Shop.
   2. Enable Approval by the group owner.
   3. Enable Approval by the additional group owner.
   4. Select another service item using Change.