Chat now with support
Chat with Support

Quest has tools and processes in place to identify, protect, detect, and remediate vulnerabilities and incidents when they occur, including external security partners. As part of our standard security operations, Quest does not use CrowdStrike in any of our operations. We are reviewing our third parties, and so far, there is minimal affect. It is Quest's policy not to provide further technical details unless they directly impact customer data.

Identity Manager 9.0 LTS - Administration Guide for Connecting to a Universal Cloud Interface

Managing Universal Cloud Interface environments Synchronizing a cloud application in the Universal Cloud Interface
Setting up initial synchronization with a cloud application in the Universal Cloud Interface Customizing the synchronization configuration Running synchronization Tasks following synchronization Troubleshooting Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)
Provisioning object changes Managing cloud user accounts and employees Managing assignments of cloud groups and system entitlements Login information for cloud user accounts Mapping cloud objects in One Identity Manager
Cloud target systems Container structures Cloud user accounts Cloud groups Cloud system entitlements Cloud permissions controls Reports about objects in cloud target systems
Handling cloud objects in the Web Portal Basic data for managing a Universal Cloud Interface environment Configuration parameters for managing cloud target systems Default project template for cloud applications in the Universal Cloud Interface

Assigning cloud system entitlements to departments, cost centers, and locations

Assign a system entitlement to departments, cost centers, or location such that the system entitlement can be inherited by user accounts through these organizations.

To assign a system entitlement to a department, cost center, or location (non role-based login)

  1. In the Manager, select the Cloud target systems > <target system> > System entitlements 1 category.

    - OR -

    In the Manager, select the Cloud target systems > <target system> > System entitlements 2 category.

    - OR -

    In the Manager, select the Cloud target systems > <target system> > System entitlements 3 category.

  2. Select the system entitlement in the result list.

  3. Select the Assign organizations task.

  4. In the Add assignments pane, assign the organizations:

    • On the Departments tab, assign departments.

    • On the Locations tab, assign locations.

    • On the Cost centers tab, assign cost centers.

    TIP: In the Remove assignments pane, you can remove assigned organizations.

    To remove an assignment

    • Select the organization and double-click .

  5. Save the changes.

To assign system entitlements to a department, a cost center, or a location (non role-based login or role-based login)

  1. In the Manager, select the Organizations > Departments category.

    - OR -

    In the Manager, select the Organizations > Cost centers category.

    - OR -

    In the Manager, select the Organizations > Locations category.

  2. Select the department, cost center, or location in the result list.

  3. Select the Assign cloud groups and system entitlements task.

  4. In the Add assignments pane, assign the system entitlements.

    • On the Cloud system entitlement 1 tab, assign the system entitlement 1.

    • On the Cloud system entitlement 2 tab, assign the system entitlement 2.

    • On the Cloud system entitlement 3 tab, assign the system entitlement 3.

    TIP: In the Remove assignments pane, you can remove system entitlement assignments.

    To remove an assignment

    • Select the system entitlement and double-click .

  5. Save the changes.
Related topics

Assigning cloud groups to business roles

NOTE: This function is only available if the Business Roles Module is installed.

You assign groups to business roles in order to assign them to user accounts over business roles.

To assign a group to a business role (non role-based login)

  1. In the Manager, select the Cloud Target Systems > <target system> > Groups category.

  2. Select the group in the result list.

  3. Select the Assign business roles task.

  4. In the Add assignments pane, select the role class and assign business roles.

    TIP: In the Remove assignments pane, you can remove assigned business roles.

    To remove an assignment

    • Select the business role and double-click .

  5. Save the changes.

To assign groups to a business role (non role-based login or role-based login)

  1. In the Manager, select the Business roles > <role class> category.

  2. Select the business role in the result list.

  3. Select the Assign cloud groups and system entitlements task.

  4. Select the Cloud Groups tab.

  5. In the Add assignments pane, assign the groups.

    TIP: In the Remove assignments pane, you can remove the assignment of groups.

    To remove an assignment

    • Select the group and double-click .

  6. Save the changes.
Related topics

Assigning cloud system entitlements to business roles

NOTE: This function is only available if the Business Roles Module is installed.

Assign a system entitlement to business roles such that the group is inherited by user accounts through these business roles.

To assign a system entitlement to business roles (non role-based login):

  1. In the Manager, select the Cloud target systems > <target system> > System entitlements 1 category.

    - OR -

    In the Manager, select the Cloud target systems > <target system> > System entitlements 2 category.

    - OR -

    In the Manager, select the Cloud target systems > <target system> > System entitlements 3 category.

  2. Select the system entitlement in the result list.

  3. Select the Assign business roles task.

  4. In the Add assignments pane, select the role class and assign business roles.

    TIP: In the Remove assignments pane, you can remove assigned business roles.

    To remove an assignment

    • Select the business role and double-click .

  5. Save the changes.

To assign system entitlements to a business role (non role-based login or role-based login)

  1. In the Manager, select the Business roles > <role class> category.

  2. Select the business role in the result list.

  3. Select the Assign cloud groups and system entitlements task.

  4. In the Add assignments pane, assign the system entitlements.

    • On the Cloud system entitlement 1 tab, assign the system entitlement 1.

    • On the Cloud system entitlement 2 tab, assign the system entitlement 2.

    • On the Cloud system entitlement 3 tab, assign the system entitlement 3.

    TIP: In the Remove assignments pane, you can remove system entitlement assignments.

    To remove an assignment

    • Select the system entitlement and double-click .

  5. Save the changes.
Related topics

Adding cloud groups to system roles

NOTE: This function is only available if the System Roles Module is installed.

Use this task to add a group to system roles.

If you assign a system role to employees, all user accounts owned by these employees inherit the group.

NOTE: Groups with Only use in IT Shop set can only be assigned to system roles that also have this option set. For more information, see the One Identity Manager System Roles Administration Guide.

To assign a group to system roles

  1. In the Manager, select the Cloud Target Systems > <target system> > Groups category.

  2. Select the group in the result list.

  3. Select the Assign system roles task.

  4. In the Add assignments pane, assign system roles.

    TIP: In the Remove assignments pane, you can remove the system role assignment.

    To remove an assignment

    • Select the system role and double-click .

  5. Save the changes.
Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating