When employees are added to a custom node they are entitled to make IT Shop requests. Access permissions to the IT Shop and the assignments allocated to them through product requests in the IT Shop are displayed on the employee‘s overview. For detailed information, see the One Identity Manager IT Shop Administration Guide.
To add an employee to the IT Shop
- OR -
Remove the custom nodes in Remove assignments.
For detailed information about implementing and editing application roles, see the One Identity Manager Authorization and Authentication Guide.
Assigned employees obtain all the write permissions of the permission group to which the application role (or a parent application role) is assigned. In addition, employees obtain the company resources assigned to the application role.
Employees of the parent application role are inherited if no employees are directly assigned to an application role.
|NOTE: The application roles for Base roles | Everyone (Change), Base roles | Everyone (Lookup), Base roles | Employee Managers and Base roles | Birthright Assignments are automatically assigned to employees. Do not make any manually assignments to these application roles.|
To assign application to an employee
- OR -
Remove the application roles in Remove assignments.
Resources can be assigned directly or indirectly to employees. Indirect assignment is carried out by allocating employees and resources in company structures, like departments, cost centers, locations or business roles.
To react quickly to special requests, you can assign resources directly to an employee.
To assign resources directly to an employee
- OR -
Remove the resources in Remove assignments.
NOTE: This function is only available if the module Application Management Module is installed.
You can assign applications directly or indirectly to employees. Indirect assignment is carried out by assigning employees and applications to company structures, such as departments, cost centers, locations, or business roles. For detailed information about working with applications, see One Identity Manager Application Management Administration Guide.
To react quickly to special requests, you can assign applications directly to an employee.
To assign an application directly to an employee
- OR -
Remove applications in Remove assignments.