Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 8.1.4 - Administration Guide for Connecting Unix-Based Target Systems

Table of Contents

Managing Unix-based systems

Architecture overview One Identity Manager users for managing Unix-based target systems

Setting up synchronization with a Unix-based target system

Users and permissions for synchronizing with a Unix-based target system Configuring Unix the host Setting up the synchronization server Creating a synchronization project for initial synchronization of a Unix host

Information required for setting up a synchronization project Setting up an initial synchronization project

Displaying synchronization results

Configuring the retention period for logs

Customizing the synchronization configuration

Configuring Unix host synchronization Configuring synchronization of several Unix hosts Updating schemas

Post-processing outstanding objects Configuring the provisioning of memberships Accelerating provisioning and single object synchronization Help for the analysis of synchronization issues Disabling synchronization

Basic data for Unix-based target systems

Setting up account definitions

Creating an account definition

Master data for an account definition Creating manage levels

Master data for manage levels

Creating a formatting rule for IT operating data Collecting IT operating data Modify IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning an account definition to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions to the IT Shop

Assigning account definitions to a target system Deleting an account definition

Password policies for Unix user accounts

Predefined password policies Using password policies Editing password policies

General master data for password policies Policy settings Character classes for passwords

Custom scripts for password requirements

Script for checking passwords Script for generating a password

Password exclusion list Checking a password Testing password generation

Initial password for new Unix user accounts Email notifications about login data Target system managers Editing a server

Master data for a Job server Server functions of a Job server

General master data for Unix hosts Specifying categories for inheriting permissions How to edit a synchronization project Displaying the Unix host overview Displaying Unix login shells

Unix user accounts

Linking user accounts to employees Supported user account types

Default user accounts Administrative user accounts

Providing administrative user accounts for one employee Providing administrative user accounts for several employees

Privileged user accounts

Entering master data for Unix user accounts

General master data of a Unix user account User account master data for AIX systems

User account limits User account password data Security-relevant user account master data Master data for a user account on an encrypted file system

Additional tasks for managing Unix user accounts

Displaying the Unix user account overview Changing the manage level of Unix user accounts Assigning Unix groups directly to a Unix user account Assigning extended properties to Unix user accounts

Automatic assignment of employees to Unix user accounts

Editing search criteria for automatic employee assignment

Disabling user accounts for AIX systems Deleting and restoring Unix user accounts

Entering master data for Unix groups

General master data for a Unix group

Assigning Unix groups to Unix user accounts

Assigning Unix groups to departments, cost centers and locations Assigning Unix groups to business roles Assigning Unix user accounts directly to a Unix group Adding Unix groups to system roles Adding Unix groups to the IT Shop

Removing a Unix group from an IT Shop shelf Removing a Unix group from all IT Shop shelves

Additional tasks for managing Unix groups

Displaying the Unix group overview Adding Unix groups to Unix groups Effectiveness of group memberships Unix group inheritance based on categories Assigning extended properties to Unix groups

Deleting Unix groups

Reports about Unix objects

Overview of all assignments

Configuration parameters for managing a Unix environment Default project template for Unix-based target systems

Adding Unix groups to the IT Shop

Once a group has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed.

The group must be labeled with the option IT Shop.
The group must be assigned to a service item.
If you want the group to be assigned only to employees through the IT Shop, the group must also be marked with the Only use in IT Shop. Direct assignment to hierarchical roles may not be possible.

NOTE: IT Shop administrators can assign groups to the IT Shop shelves if login is role-based. Target system administrators are not authorized to add groups in the IT Shop.

To add a group to the IT Shop

Select the Unix | Groups (non role-based login) category.
- OR -

Select the Entitlements | Unix groups (role-based login) category.
Select the group in the result list.
Select the Add to IT Shop task.
In the Add assignments pane, add to the IT Shop shelves.
Save the changes.

For more detailed information about request from company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related topics

Removing a Unix group from an IT Shop shelf

To remove a group from individual IT Shop shelves

Select the Unix | Groups (non role-based login) category.
- OR -

Select the Entitlements | Unix groups (role-based login) category.
Select the group in the result list.
Select the Add to IT Shop task.
In the Remove assignments pane, remove the group from the IT Shop shelves.
Save the changes.

Removing a Unix group from all IT Shop shelves

To remove a group from all IT Shop shelves

Select the Unix | Groups (non role-based login) category.
- OR -

Select the Entitlements | Unix groups (role-based login) category.
Select the group in the result list.
Select the Remove from all shelves (IT Shop) task.
Confirm the security prompt with Yes.
Click OK.
The group is removed from all shelves by the One Identity Manager Service. All requests and assignment requests with this group are canceled in the process.

Additional tasks for managing Unix groups

After you have entered the master data, you can run the following tasks.

Displaying the Unix group overview

Adding Unix groups to Unix groups

Effectiveness of group memberships

Unix group inheritance based on categories

Assigning extended properties to Unix groups

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center