Chat now with support
Chat with Support

Identity Manager 8.1.5 - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Managing departments, cost centers, and locations Working with dynamic roles Employee administration
One Identity Manager users for employee administration Basic data for employee master data Entering employee master data Employee's central user account Employee's central password Employee's default email address Mapping multiple employee identities Disabling and deleting employees Password policies for employees Limited access to One Identity Manager Assigning company resources to employees Displaying the origin of an employee's roles and entitlements Analyzing role memberships and employee assignments Additional tasks for managing employees Determining an employee’s language Determining an employee's working hours Employee reports
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Effective configuration parameters for setting up employees Configuration parameters for managing devices and workdesks

Resource master data

Enter the following master data for a resource.

Table 68: Resource master data
Property Description
Resource Resource identifier.

Resource type

Resource type for grouping resources.

Service item

Service item through which you can request the resource in the IT Shop. Assign an existing service item or add a new one.

Required resource

Define the dependencies between resources. When this resource is requested or assigned, the required resource is automatically requested or assigned with it.

Risk index

Value for evaluating the risk of resource assignments to employees. Enter a value between 0 and 1. This input field is only visible if the QER | CalculateRiskIndex configuration parameter is set.

IT Shop

Specifies whether the resource can be requested through the IT Shop. The resource can be ordered by an employee over the Web Portal and distributed using a defined approval process. The resource can also be assigned directly to employees and roles outside the IT Shop.

Only for use in IT Shop

Specifies whether the resource can only be requested through the IT Shop. The resource can be ordered by an employee over the Web Portal and distributed using a defined approval process. This means, the resource cannot be directly assigned to roles outside the IT Shop.

No inheritance on security risk

Resources marked with this option are not inherited by employee who are rated as a security risk.

Description Text field for additional explanation.
Automatic assignment to employees

Specifies whether the resource is assigned automatically to all internal employees. The resource is assigned to every employee not marked as external, on saving. New employees automatically obtain this resource as soon as they are added.

Disable this option to remove automatic assignment of the resource to all employees. The resource cannot be reassigned to employees from this point on. Existing resource assignments remain intact.

Spare field no. 01 ... Spare field no. 10

Additional company-specific information. Use the Designer to customize display names, formats, and templates for the input fields.

Related topics
  • Resource types
  • One Identity Manager Risk Assessment Administration Guide
  • One Identity Manager IT Shop Administration Guide

Assigning resources to employees

Resources can be assigned to employees directly, indirectly, or through IT Shop requests. In the case of indirect assignment employees and resources are arranged in hierarchical roles. The number of resources assigned to an employee is calculated from the position in the hierarchy and the direction of inheritance. Add employees to a shop as customers so that resources can be assigned through IT Shop requests. All resources, which are assigned to this shop can be requested by the customers. Requested resources are assigned to the employees after approval is granted.

Prerequisites for indirect assignment of resources to employees are:

  • Assignment of employees and resources is permitted for role classes (departments, cost centers, locations, or business roles).
Detailed information about this topic

Assigning resources to departments, cost centers, and locations

Assign a resource to departments, cost centers or locations such that employees inherit the resource through these organizations.

To assign a resource to departments, cost centers and locations

  1. Select the Entitlements | Resources category.

  2. Select a resource in the result list.

  3. Select the Assign organizations task.

  4. In the Add assignments pane, assign the organizations:

    • On the Departments tab, assign departments.

    • On the Locations tab, assign locations.

    • On the Cost centers tab, assign cost centers.

    TIP: In the Remove assignments pane, you can remove assigned organizations.

    To remove an assignment

    • Select the organization and double-click .

  5. Save the changes.
Related topics

Assigning resources to business roles

Installed modules: Business Roles Module

Assign a resource to business roles such that the resource is inherited by employees through these business roles.

To assign a resource to business roles

  1. Select the Entitlements | Resources category.

  2. Select a resource in the result list.

  3. Select the Assign business roles task.

  4. In the Add assignments pane, assign business roles.

    TIP: In the Remove assignments pane, you can remove assigned business roles.

    To remove an assignment

    • Select the business role and double-click .

  5. Save the changes.
Detailed information about this topic
  • One Identity Manager Business Roles Administration Guide
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating