Chat now with support
Chat with Support

Identity Manager 8.1 - Administration Guide for Connecting to SharePoint Online

Mapping a SharePoint Online environment in One Identity Manager Synchronizing a SharePoint Online environment Managing SharePoint Online user accounts and employees Managing the assignments of SharePoint Online groups and roles Mapping of SharePoint Online objects in One Identity Manager
SharePoint Online tenants SharePoint Online user accounts SharePoint Online groups SharePoint Online permission levels SharePoint Online site collections SharePoint Online sites SharePoint Online roles
Handling of SharePoint Online objects in Web Portal Basic data for managing a SharePoint Online environment Appendix: Configuration parameters for managing SharePoint Online Appendix: Default project template for SharePoint Online Appendix: Editing system objects About us

Mapping a SharePoint Online environment in One Identity Manager

One Identity Manager offers simplified user administration for SharePoint Online environments. The One Identity Manager concentrates on the mapping of site collections, sites, and groups that exist within a cloud environment.

One Identity Manager provides company employees with the necessary user accounts. For this, you can use different mechanisms to connect employees to their user accounts. You can also manage user accounts independently of employees and therefore set up administrator user accounts.

The system information for the SharePoint Online structure is loaded into the One Identity Manager database during data synchronization. It is only possible to customize certain system information in One Identity Manager due to the complex dependencies and far reaching effects of changes.

For more detailed information about the SharePoint Online structure, see the SharePoint Online documentation from Microsoft.

Related Topics

Architecture overview

To access SharePoint Online organizational data, the SharePoint Online connector is installed on a synchronization server. The synchronization server ensures data is compared between the One Identity Manager database and SharePoint Online. The SharePoint Online connector is part of the SharePoint Online Module and responsible for communicating with the Microsoft Office 365 subscriptions of SharePoint Online in the cloud. The Microsoft CSOM (Client-side object model) is used for accessing the SharePoint Online data.

NOTE: For access to the data of a SharePoint Online tenant, the Azure Active Directory tenant to which the SharePoint Online tenant is connected must be synchronized.

For more detailed information about synchronizing an Azure Active Directory tenant, see the One Identity Manager Administration Guide for Connecting to Azure Active Directory.

Figure 1: Architecture for synchronization

One Identity Manager users for managing a SharePoint Online environment

The following users are used for setting up and administration of a SharePoint Online system.

Table 1: Users
Users Task
Target system administrators

Target system administrators must be assigned to the Target systems | Administrators application role.

Users with this application role:

  • Administrate application roles for individual target systems types.

  • Specify the target system manager.

  • Set up other application roles for target system managers if required.

  • Specify which application roles are conflicting for target system managers

  • Authorize other employee to be target system administrators.

  • Do not assume any administrative tasks within the target system.

Target system managers

Target system managers must be assigned to Target systems | SharePoint Online or a sub-application role.

Users with this application role:

  • Assume administrative tasks for the target system.

  • Create, change or delete target system objects, like user accounts or groups.

  • Edit password policies for the target system.

  • Prepare groups for adding to the IT Shop.

  • Can create employees with an identity that differs from the Primary identity.

  • Configure synchronization in the Synchronization Editor and defines the mapping for comparing target systems and One Identity Manager.

  • Edit the synchronization's target system types and outstanding objects.

  • Authorize other employees within their area of responsibility as target system managers and create child application roles if required.

One Identity Manager administrators
  • Create customized permissions groups for application roles for role-based login to administration tools in Designer as required.

  • Create system users and permissions groups for non-role-based login to administration tools in Designer as required.

  • Enable or disable additional configuration parameters in Designer as required.

  • Create custom processes in Designer as required.

  • Create and configures schedules as required.

  • Create and configure password policies as required.

Configuration parameters

Use configuration parameters to configure the behavior of the system's basic settings. One Identity Manager provides default settings for different configuration parameters. Check the configuration parameters and modify them as necessary to suit your requirements.

Configuration parameters are defined in the One Identity Manager modules. Each One Identity Manager module can also install configuration parameters. You can find an overview of all configuration parameters in Base data | General | Configuration parameters in Designer.

For more information, see Appendix: Configuration parameters for managing SharePoint Online.

Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents