Chat now with support
Chat with Support

Identity Manager 8.1.5 - Administration Guide for Connecting to Azure Active Directory

Managing Azure Active Directory environments Setting up synchronization with an Azure Active Directory tenant Basic data for managing an Azure Active Directory environment Azure Active Directory core directories Azure Active Directory user accounts Azure Active Directory groups Azure Active Directory administrator roles Azure Active Directory subscriptions and service plans
Azure Active Directory subscriptions Disabled Azure Active Directory service plans
Reports about Azure Active Directory objects Configuration parameters for managing an Azure Active Directory environment Default project template for Azure Active Directory

Assigning Azure Active Directory subscriptions to Azure Active Directory user accounts

You can assign subscriptions directly or indirectly to a user account. In the case of indirect assignment, employees and subscriptions are assigned to hierarchical roles, such as departments, cost centers, locations, or business roles. Subscriptions assigned to an employee are calculated from the position in the hierarchy and the direction of inheritance.

If the employee has a user account in Azure Active Directory, role subscriptions are inherited by this user account.

Prerequisites for the indirect assignment of employees to user accounts:

  • Assignment of employees and subscriptions is permitted for role classes (departments, cost centers, locations, or business roles).
  • User accounts are marked with the Groups can be inherited option.

Furthermore, subscriptions can be assigned to employees through IT Shop requests. Add employees to a shop as customers so that subscriptions can be assigned through IT Shop requests. All subscriptions assigned to this shop can be requested by the customers. Requested subscriptions are assigned to the employees after approval is granted.

TIP: You can combine the account definition for creating the user account and the subscription that will be used into one system role. In this way, the employee automatically obtains a user account and a subscription.

An employee can obtain this system role directly through departments, cost centers, locations, or business roles, or an IT Shop request.

Detailed information about this topic

Assigning Azure Active Directory subscriptions to departments, cost centers, and locations

Assign subscriptions to departments, cost centers, and locations in order to assign user accounts to them through these organizations.

To assign a subscription to departments, cost centers, or locations (non role-based login)

  1. Select the Azure Active Directory | Subscriptions category.
  2. Select a subscription in the result list.
  3. Select the Assign organizations task.

  4. In the Add assignments pane, assign the organizations:

    • On the Departments tab, assign departments.

    • On the Locations tab, assign locations.

    • On the Cost centers tab, assign cost centers.

    TIP: In the Remove assignments pane, you can remove assigned organizations.

    To remove an assignment

    • Select the organization and double-click .

  5. Save the changes.

To assign subscriptions to a department, cost center, or location (role-based login)

  1. Select the Organizations | Departments category.

    - OR -

    Select the Organizations | Cost centers category.

    - OR -

    Select the Organizations | Locations category.

  2. Select the department, cost center, or location in the result list.
  3. Select the Assign Azure Active Directory subscriptions task.
  4. In the Add assignments pane, assign the subscriptions.

    - OR -

    In the Remove assignments pane, remove the subscriptions.

  5. Save the changes.
Related topics

Assigning Azure Active Directory subscriptions to business roles

Installed modules: Business Roles Module

Assign subscriptions to business roles to assign them to user accounts over these business roles.

To assign a subscription to business roles (non role-based login)

  1. Select the Azure Active Directory | Subscriptions category.
  2. Select a subscription in the result list.
  3. Select the Assign business roles task.

  4. In the Add assignments pane, assign business roles.

    TIP: In the Remove assignments pane, you can remove assigned business roles.

    To remove an assignment

    • Select the business role and double-click .

  5. Save the changes.

To assign subscriptions to a business role (role-based login)

  1. Select the Business roles | <Role class> category.
  2. Select the business role in the result list.
  3. Select the Assign Azure Active Directory subscriptions task.
  4. In the Add assignments pane, assign the subscriptions.

    - OR -

    In the Remove assignments pane, remove the subscriptions.

  5. Save the changes.
Related topics

Assigning Azure Active Directory user accounts directly to an Azure Active Directory subscription

You can assign subscriptions directly or indirectly to a user account. In the case of indirect assignment, employees and subscriptions are assigned to hierarchical roles, such as departments, cost centers, locations, or business roles. If the employee has a user account in Azure Active Directory, role subscriptions are inherited by this user account.

To react quickly to special requests, you can assign subscriptions directly to a user account.

To assign a subscription directly to user accounts

  1. Select the Azure Active Directory | Subscriptions category.
  2. Select a subscription in the result list.
  3. Select the Assign user accounts task.

  4. In Add assignments pane, assign user accounts.

    TIP: In the Remove assignments pane, you can remove assigned user accounts.

    To remove an assignment

    • Select the user account and double-click .
  5. Save the changes.
Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating