Assigning extended properties to Unix groups
Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.
To specify extended properties for a group
-
In the Manager, select the Unix | Groups category.
-
Select the group in the result list.
-
Select the Assign extended properties task.
-
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.
To remove an assignment
- Select the extended property and double-click
.
- Save the changes.
For more detailed information about setting up extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.
Deleting Unix groups
To delete a group
- Select the Unix | Groups category.
- Select the group in the result list.
- Delete the group using
.
- Confirm the security prompt with Yes.
The group is deleted completely from the One Identity Manager database and from Unix.
Reports about Unix objects
One Identity Manager makes various reports available containing information about the selected base object and its relations to other One Identity Manager database objects. The following reports are available for Unix-based target systems.
NOTE: Other sections may be available depending on the which modules are installed.
Table 35: Reports for the target system
|
Overview of all assignments |
This report finds all roles containing employees with at least one user account in the selected host system. |
|
Show orphaned user accounts |
This report shows all host's user accounts that are not assigned to an employee. The report contains group memberships and risk assessment. |
|
Show employees with multiple user accounts |
This report shows all employees with more than one user account in the host. The report contains a risk assessment. |
|
Show unused user accounts |
This report shows all user accounts in the host that have not been used in the last few months. The report contains group memberships and risk assessment. |
|
Show entitlement drifts |
This report shows all host's groups that are the result of manual operations in the target system rather than provisioned by One Identity Manager. |
|
Show user accounts with an above average number of system entitlements |
This report contains all the host's user accounts with an above average number of group memberships. |
|
Unix user account and group administration |
This report contains a summary of user account and group distribution in all host systems. You can find this report in the My One Identity Manager category. |
|
Data quality summary for Unix user accounts |
This report contains different evaluations of user account data quality in all host systems. You can find this report in the My One Identity Manager category. |
Overview of all assignments
The Overview of all assignments report is displayed for some objects, such as authorizations, compliance rules, or roles. The report finds all the roles, for example, departments, cost centers, locations, business roles, and IT Shop structures in which there are employees who own the selected base object. In this case, direct as well as indirect base object assignments are included.
Examples
- If the report is created for a resource, all roles are determined in which there are employees with this resource.
- If the report is created for a group or another system entitlement, all roles are determined in which there are employees with this group or system entitlement.
- If the report is created for a compliance rule, all roles are determined in which there are employees who violate this compliance rule.
- If the report is created for a department, all roles are determined in which employees of the selected department are also members.
- If the report is created for a business role, all roles are determined in which employees of the selected business role are also members.
To display detailed information about assignments
Figure 3: Toolbar of the Overview of all assignments report.
Table 36: Meaning of icons in the report toolbar
|
|
Show the legend with the meaning of the report control elements |
|
|
Saves the current report view as a graphic. |
|
|
Selects the role class used to generate the report. |
|
|
Displays all roles or only the affected roles. |
button in a role's control, you display all employees in the role with the base object.