Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 8.1.5 - Administration Guide for Connecting to G Suite

Table of Contents

Mapping G Suite in One Identity Manager

Architecture overview One Identity Manager users for managing G Suite Configuration parameter

Synchronizing G Suite

Setting up initial synchronization of G Suite

Users and permissions for synchronizing with G Suite

Setting up required permissions for accessing G Suite

Setting up the G Suite synchronization server

System requirements for the G Suite synchronization server Installing the One Identity Manager Service

Creating a synchronization project for initial synchronization of G Suite

Information required for setting up a synchronization project Creating an initial synchronization project for G Suite

Configuring the synchronization log

Adjusting the synchronization configuration for G Suite environments

Configuring synchronization in G Suite Configuring synchronization of different customers Updating schemas Speeding up synchronization with revision filtering Advanced settings for system connection to G Suite

Editing connection parameters in the variable set Editing target system connection properties

Configuring the provisioning of memberships Configuring single object synchronization Accelerating provisioning and single object synchronization

Executing synchronization

Starting synchronization Displaying synchronization results Deactivating synchronization Synchronizing single objects

Tasks after a synchronization

Post-processing outstanding objects Adding custom tables to the target system synchronization Managing user accounts through account definitions

Troubleshooting

Managing G Suite user accounts and employees

Account definitions for G Suite user accounts

Creating account definitions Editing account definitions Master data for account definitions Editing manage levels Creating manage levels Master data for manage levels Creating mapping rules for IT operating data Entering IT operating data Modify IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions in the IT Shop

Assigning account definitions to target systems Deleting account definitions

Automatic assignment of employees to G Suite user accounts

Editing search criteria for automatic employee assignment

Finding employees and directly assigning them to user accounts

Changing the manage level in G Suite user accounts Assigning account definitions to linked user accounts

Manually linking employees to G Suite user accounts Supported user account types

Default user accounts Administrative user accounts

Providing administrative user accounts for one employee Providing administrative user accounts for several employees

Privileged user accounts

Provision of login information for G Suite user accounts

Password policies for G Suite user accounts

Predefined password policies Using password policies Editing password policies Creating password policies General master data for password policies Policy settings Character classes for passwords Custom scripts for password requirements

Script for checking passwords Script for generating a password

Editing the excluded list for passwords Checking passwords Testing the generation of passwords

Initial password for new G Suite user accounts Email notifications about login data

Managing G Suite entitlement assignments

Assigning G Suite entitlements to user accounts in One Identity Manager

Assigning G Suite entitlements to departments, cost centers, and locations Assigning G Suite entitlements to business roles Adding G Suite entitlements to system roles Adding G Suite entitlements to the IT Shop Assigning G Suite user accounts directly to an entitlement Assigning G Suite entitlements directly to a user account Assigning G Suite groups directly to a customer Assigning G Suite customers directly to a group

Effectiveness of G Suite entitlement assignments Inheritance of G Suite entitlements based on categories Overview of all assignments

Mapping of G Suite objects in One Identity Manager

G Suite customers

Creating G Suite customers Editing master data for G Suite customers General master data for G Suite customers G Suite customer address data Defining categories for the inheritance of G Suite entitlements Additional tasks for managing G Suite customers

Overview of a G Suite customer Editing the synchronization project for a G Suite customer

G Suite user accounts

Creating G Suite user accounts Editing master data for G Suite user accounts General master data for G Suite user accounts Password data for G Suite user accounts Phone numbers for G Suite user accounts Addresses for G Suite user accounts Email addresses for G Suite user accounts External IDs for G Suite user accounts Instant messenger data for G Suite user accounts User details for G Suite user accounts Relationships of G Suite user accounts Websites of G Suite user accounts Additional tasks for managing G Suite user accounts

Overview of G Suite user accounts Assigning extended properties to G Suite user accounts Moving G Suite user accounts to a different organization

Locking G Suite user accounts Deleting and restoring G Suite user accounts Transferring user data to a different G Suite user account

Creating G Suite groups Entering master data for G Suite groups General master data for G Suite groups Additional settings for G Suite groups Additional tasks for managing G Suite groups

Overview of G Suite groups Assigning extended properties to G Suite groups Assigning group managers Assigning group owners Assigning G Suite groups to G Suite groups

Deleting G Suite groups

G Suite products and SKUs

Editing master data for G Suite products and SKUs General master data for G Suite products and SKUs Additional tasks for managing G Suite products and SKUs

Overview of G Suite products and SKUs Assigning extended properties to G Suite products and SKUs

G Suite organizations

Creating G Suite organizations Editing master data for G Suite organizations General master data for G Suite organizations Additional tasks for managing G Suite organizations

Overview of G Suite organizations Moving G Suite organizations

Deleting G Suite organizations

G Suite domains G Suite domain aliases G Suite admin roles

Creating G Suite admin roles Editing master data for G Suite admin roles General master data for G Suite admin roles Additional tasks for managing G Suite admin roles

Overview of G Suite admin roles Assigning admin privileges to G Suite admin roles

Deleting G Suite admin roles

G Suite admin privileges

Display master data for G Suite admin privileges Additional tasks for managing G Suite admin privileges

Overview of G Suite admin privileges Assigning G Suite admin privileges to admin roles

G Suite admin role assignments

Creating G Suite admin role designations Additional tasks for managing G Suite admin role assignments

Overview of G Suite admin role assignments Assigning user accounts to G Suite admin role designations

Deleting G Suite admin role assignments

Reports about G Suite objects

Handling of G Suite objects in the Web Portal Basic data for managing G Suite

Job server for G Suite-specific process handling

Editing G Suite Job servers General master data for Job servers Specifying server functions

Target system managers for customers

Troubleshooting the connection to a G Suite environment

Newly added G Suite user accounts are marked as outstanding

Configuration parameters for managing G Suite Default project templates for G Suite API scopes for the service account Processing G Suite system objects Special features in the assignment of G Suite groups About us

G Suite groups

Mapping of G Suite objects in One Identity Manager > G Suite groups

Users of G Suite can use groups to exchange information or organize meetings. This information is only made available to the members of a group. In One Identity Manager, you can create and edit groups and manage group members.

Creating G Suite groups

Mapping of G Suite objects in One Identity Manager > G Suite groups > Creating G Suite groups

To create a group

In the Manager, select the G Suite | Groups category.
Click in the result list.
On the master data form, edit the master data for the group.
Save the changes.

Detailed information about this topic

Related topics

Entering master data for G Suite groups

Mapping of G Suite objects in One Identity Manager > G Suite groups > Entering master data for G Suite groups

To edit group master data

In the Manager, select the G Suite | Groups category.
Select the group in the result list and run the Change master data task.
On the master data form, edit the master data for the group.
Save the changes.

Detailed information about this topic

Related topics

General master data for G Suite groups

Mapping of G Suite objects in One Identity Manager > G Suite groups > General master data for G Suite groups

On the General tab, edit the following master data.

Table 40: Entering master data for a group
Property	Description
G Suite customer	Customer to which the group belongs.
Group ID	Unique ID of the group.
Group name	Name of the group.
Email address	Group's email address
Service item	Service item data for requesting the group through the IT Shop.
IT Shop	Specifies whether the group can be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. The group can still be assigned directly to hierarchical roles.
Only for use in IT Shop	Specifies whether the group can only be requested through the IT Shop. If this option is set, the group can be requested by the employees through the Web Portal and distributed with a defined approval process. Direct assignment of the group to hierarchical roles or user accounts is not permitted.
Risk index	Value for evaluating the risk of assigning the group to user accounts. Enter a value between 0 and 1. This input field is only visible if the QER \| CalculateRiskIndex configuration parameter is activated. For more detailed information, see the One Identity Manager Risk Assessment Administration Guide.
Category	Categories for group inheritance. Groups can be selectively inherited by user accounts. To do this, groups and user accounts are divided into categories. Select one or more categories from the menu.
Description	Text field for additional explanation.
Is admin created	Specifies whether the group was created by an administrator. If this option is disable, the group was created by a user.
Aliases	List of additional email addresses under which emails can be sent to the group.
Non editable aliases	List of all email addresses that cannot be changed. These email addresses do not belong to the primary domain or its subdomains.

Related topics

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center