Chat now with support
Chat with Support

Identity Manager 8.1.5 - Administration Guide for Connecting to Azure Active Directory

Managing Azure Active Directory environments Setting up synchronization with an Azure Active Directory tenant Basic data for managing an Azure Active Directory environment Azure Active Directory core directories Azure Active Directory user accounts Azure Active Directory groups Azure Active Directory administrator roles Azure Active Directory subscriptions and service plans
Azure Active Directory subscriptions Disabled Azure Active Directory service plans
Reports about Azure Active Directory objects Configuration parameters for managing an Azure Active Directory environment Default project template for Azure Active Directory

Assigning Azure Active Directory administrator roles to departments, cost centers, and locations

By assigning administrator roles to departments, cost centers, or locations, you enable the group to be assigned to user accounts through these organizations.

To assign an administrator role to departments, cost centers, or locations (non role-based login)

  1. Select the Azure Active Directory | Administrator roles category.
  2. Select the administrator role in the result list.
  3. Select the Assign organizations task.

  4. In the Add assignments pane, assign the organizations:

    • On the Departments tab, assign departments.

    • On the Locations tab, assign locations.

    • On the Cost centers tab, assign cost centers.

    TIP: In the Remove assignments pane, you can remove assigned organizations.

    To remove an assignment

    • Select the organization and double-click .

  5. Save the changes.

To assign administrator roles to departments, cost centers or locations (role-based login)

  1. Select the Organizations | Departments category.

    - OR -

    Select the Organizations | Cost centers category.

    - OR -

    Select the Organizations | Locations category.

  2. Select the department, cost center or location in the result list.
  3. Select the Assign Azure Active Directory administrator roles task.
  4. In the Add assignments pane, assign administrator roles.

    - OR -

    In the Remove assignments pane, remove administrator roles.

  5. Save the changes.
Related topics

Assigning Azure Active Directory administrator roles to business roles

Installed modules: Business Roles Module

By assigning administrator roles to business roles, the administrator role can be assigned to user accounts through these business roles.

To assign an administrator role to business roles (non role-based login)

  1. Select the Azure Active Directory | Administrator roles category.
  2. Select the administrator role in the result list.
  3. Select the Assign business roles task.

  4. In the Add assignments pane, assign business roles.

    TIP: In the Remove assignments pane, you can remove assigned business roles.

    To remove an assignment

    • Select the business role and double-click .

  5. Save the changes.

To assign administrator roles to a business role (non role-based login)

  1. Select the Business roles | <Role class> category.
  2. Select the business role in the result list.
  3. Select the Assign Azure Active Directory administrator roles task.
  4. In the Add assignments pane, assign administrator roles.

    - OR -

    In the Remove assignments pane, remove administrator roles.

  5. Save the changes.
Related topics

Assigning Azure Active Directory user accounts directly to Azure Active Directory administrator roles

Administrator roles can be assigned directly or indirectly to user accounts. Indirect assignment is carried out by allocating the employee and administrator roles in company structures, like departments, cost centers, locations, or business roles. If the employee has a user account in Azure Active Directory, the administrator roles in the role are inherited by this user account.

To react quickly to special requests, you can assign administrator roles directly to user accounts.

To assign a user account directly to an administrator role.

  1. Select the Azure Active Directory | Administrator roles category.
  2. Select the administrator role in the result list.
  3. Select the Assign user accounts task.

  4. In Add assignments pane, assign user accounts.

    TIP: In the Remove assignments pane, you can remove assigned user accounts.

    To remove an assignment

    • Select the user account and double-click .
  5. Save the changes.
Related topics

Adding Azure Active Directory administrator roles to system roles

Installed modules: System Roles Module

Use this task to add an administrator role to system roles. When you assign a system role to an employee, the administrator roles are inherited by all user accounts that these employees have.

NOTE: Applications in which the Only use in IT Shop option is set can only be assigned to system roles that also have this option set. For more information, see the One Identity Manager System Roles Administration Guide.

To assign an administrator role to system roles

  1. Select the Azure Active Directory | Administrator roles category.
  2. Select the administrator role in the result list.
  3. Select the Assign system roles task.

  4. In the Add assignments pane, assign system roles.

    TIP: In the Remove assignments pane, you can remove assigned system roles.

    To remove an assignment

    • Select the system role and double-click .

  5. Save the changes.
Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating