Chat now with support
Chat with Support

Identity Manager 8.1 - Identity Management Base Module Administration Guide

Basics for Mapping Company Structures in One Identity Manager Managing Departments, Cost Centers and Locations Working with Dynamic Roles Employee administration
One Identity Manager users for employee administration Basic data for employee master data Entering employee master data Employee's central user account Employee's central password Employee's default email address Mapping multiple employee identities Disabling and deleting employees Password policies for employees Limited access to One Identity Manager Assigning company resources to employees Displaying the origin of an employee's roles and entitlements Analyzing role memberships and employee assignments Additional tasks for managing employees Determining an employee‘s language Determining an employee's working hours Employee reports
Managing Devices and Workdesks Managing Resources Set up Extended Properties Appendix: Configuration parameters for managing departments, cost centers, and locations Appendix: Configuration parameters for managing employees Appendix: Configuration Parameters for Managing Devices and Workdesks

Additional Tasks for Managing Departments, Cost Centers and Locations.

After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.

Creating Dynamic Roles for Departments, Cost Centers and Locations

Use this task to define dynamic roles for single departments, cost centers or location. This allows you to specify memberships in these roles.

NOTE:Create dynamic role is only set for departments, cost centers, and locations, which do not have Dynamic roles not allowed set.

To create a dynamic role

  1. Select Organizations | <Role class>.
  2. Select the role in the result list.
  3. Select Create dynamic role in the task view.
  4. Enter the required master data.
  5. Save the changes.

To edit a dynamic role

  1. Select Organizations | <Role class> | Dynamic roles.
  2. Select the role in the result list.
  3. Open the role's overview form.
  4. Select the form element Dynamic roles and click on the dynamic role.
  5. Select Change master data.
  6. Edit the dynamic role's master data.
  7. Save the changes.
Related Topics

Assign organizations

Use this task to map the relationships of a department, cost center of a location to other roles. This task has the same effect as assigning a department, cost center, or location on the role master data form. The assignment is entered in the respective foreign key column in the base table.

To assign a cost center or location to departments

  1. Select Organizations | Cost centers or Organizations | Locations.
  2. Select the role in the result list.
  3. Select Assign organizations.
  4. Select Departments.
  5. Assign departments in Add assignments.

    The selected role is assigned to all departments as cost center or location.

    - OR -

    In Remove assignments, remove the departments.

  6. Save the changes.

To assign a department or a location to cost centers

  1. Select Organizations | Departments or Organizations | Locations.
  2. Select the role in the result list.
  3. Select Assign organizations.
  4. Select Cost centers.
  5. Assign cost centers in Add assignments.

    The selected role is assigned to all cost centers as department or location.

    - OR -

    In Remove assignments, remove the cost centers.

  6. Save the changes.

To assign a department or a cost center to locations

  1. Select Organizations | Departments or Organizations | Cost centers.
  2. Select the role in the result list.
  3. Select Assign organizations.
  4. Select Locations.
  5. Assign locations in Add assignments.

    The selected role is assigned to all locations as department or cost center.

    - OR -

    In Remove assignments, remove the locations.

  6. Save the changes.

Specifying Inheritance Exclusion for Roles

You can define conflicting roles to prevent employees, devices, or workdesks from being assigned to several roles at the same time and from obtaining mutually exclusive company resources through these roles. At the same time, you specify which application roles, departments, cost centers, and locations need to be mutually exclusive. This means you may not assign these roles to one and the same employee (device, workdesk).

NOTE: Only roles, which are defined directly as conflicting roles cannot be assigned to the same employee (device, workdesk). Definitions made on parent or child roles do not affect the assignment.

To configure inheritance exclusion

  • Set the configuration parameter QER | Structures | ExcludeStructures in the Designer and compile the database.

To define inheritance exclusion for a departments

  1. Select Organizations | Departments in Manager.
  2. Select the department in the result list.
  3. Select Edit conflicting departments.
  4. In Add assignments, assign the departments that are mutually exclusive to the selected department.

    - OR -

    In Remove assignments, remove the assignments that are no longer mutually exclusive.

  5. Save the changes.

To define inheritance exclusion for a cost center

  1. Select Organizations | Cost centers in Manager.
  2. Select the cost center in the result list.
  3. Select Edit conflicting cost centers.
  4. In Add assignments, assign the cost centers that are mutually exclusive to the selected cost center.

    - OR -

    In Remove assignments, remove the cost centers that are no longer mutually exclusive.

  5. Save the changes.

To define inheritance exclusion for a cost center

  1. Select Organizations | Locations in Manager.
  2. Select the location in the result list.
  3. Select Edit conflicting locations.
  4. In Add assignments, assign the locations that are mutually exclusive to the selected location.

    - OR -

    In Remove assignments, remove the locations that are no longer mutually exclusive.

  5. Save the changes.
Detailed information about this topic
Related Documents