Chat now with support
Chat with Support

Identity Manager 8.1 - Administration Guide for Connecting Unix-Based Target Systems

Managing Unix-Based Systems Setting Up Synchronization with a Unix-Based Target System Base Data for Unix-Based Target Systems Unix Host Unix User Accounts Unix Groups Reports about Unix Objects Appendix: Configuration parameters for managing a Unix environment Appendix: Default Project Template for Unix-Based Target Systems

Assigning Unix User Accounts Directly to a Unix Group

Groups can be assigned directly or indirectly to user accounts. Indirect assignment is done by allocating the employee and groups into company structures such as departments, cost centers, locations or business roles. If the employee has a user account in a Unix-based target system, the groups in the role are inherited by this user account.

To react quickly to special requests, you can assign groups directly to user accounts.

To assign a group directly to user accounts

  1. In Manager, select Unix | Groups.

  2. Select the group in the result list.

  3. Select Assign user accounts.

  4. Assign user accounts in Add assignments.

    TIP: In the Remove assignments area, you can remove the assignment of user accounts.

    To remove an assignment

    • Select the user account and double click .
  5. Save the changes.
Related Topics

Adding Unix Groups to System Roles

Installed modules: System Roles Module

Use this task to add a group to system roles. If you assign a system role to employees, all the user accounts belonging to these employees inherit the group.

NOTE: Groups with Only use in IT Shop set can only be assigned to system roles that also have this option set. For more detailed information, see the One Identity Manager System Roles Administration Guide.

To assign a group to system roles

  1. In Manager, select Unix | Groups.

  2. Select the group in the result list.

  3. Select Assign system roles.

  4. Assign system roles in Add assignments.

    TIP: In the Remove assignments area, you can remove the assignment of system roles.

    To remove an assignment

    • Select the system role and double click .

  5. Save the changes.
Related Topics

Adding Unix Groups to the IT Shop

Once a group has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed.

  • The group must be labeled with the option IT Shop.
  • The group must be assigned to a service item.
  • If you want the group to be assigned only to employees via IT Shop, the group must also be marked with the Only use in IT Shop. Direct assignment to hierarchical roles may not be possible.

NOTE: IT Shop administrators can assign groups to IT Shop shelves if login is role-based. Target system administrators are not authorized to add groups in the IT Shop.

To add a group to the IT Shop

  1. Select the category Unix | Groups (non role-based login).

    - OR -

    Select Entitlements | Unix Groups (role-based login).

  2. Select the group in the result list.
  3. Select Add to IT Shop.
  4. In Add assignments view, add to the IT Shop shelves.
  5. Save the changes.

For more detailed information about request from company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related Topics

Removing a Unix Group from an IT Shop Shelf

To remove a group from individual IT Shop shelves

  1. Select the category Unix | Groups (non role-based login).

    - OR -

    Select Entitlements | Unix Groups (role-based login).

  2. Select the group in the result list.
  3. Select Add to IT Shop.
  4. Remove the group from the IT Shop shelves in Remove assignments.
  5. Save the changes.
Related Documents