Chat now with support
Chat with Support

Identity Manager 9.0 LTS - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Dynamic roles Departments, cost centers, and locations
One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations Creating and editing departments Creating and editing cost centers Creating and editing locations Setting up IT operating data for departments, cost centers, and locations Assigning employees, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded employees Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Reports about departments, cost centers, and locations
Employee administration
One Identity Manager users for employee administration Basic data for employee main data Employee's central user account Employee's default email address Employee's central password Mapping multiple employee identities Password policies for employees Creating and editing employees Disabling and deleting employees Deleting all employee related data Limited access to One Identity Manager Changing the certification status of employees Assigning company resources to employees Displaying the origin of employees' roles and entitlements Analyzing role memberships and employee assignments Displaying the employees overview Displaying and deleting employees' Webauthn security keys Determining the language for employees Determining employees working hours Manually assigning user accounts to employees Entering calls for employees Assigning extended properties to employees Employee reports
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing employees Configuration parameters for managing devices and workdesks

Starting dynamic role schedules immediately

NOTE: When a schedule is started, all dynamic roles that have this schedule assigned and where the No recalculation of assignments option is not set are recalculated.

To start a schedule immediately

  1. In the Manager, select the Organizations > Basic configuration data > Schedules category.

  2. Select the schedule in the result list.

  3. Select the Start immediately task.

    A message appears confirming that the schedule was started.

Assigning dynamic roles to schedules

Use this task to assign dynamic roles to the selected schedule that will run them. The assignment form displays all the dynamic roles that are assigned this selected schedule.

To assign dynamic roles to a schedule

  1. In the Manager, select the Organizations > Basic configuration data > Schedules category.

  2. Select the schedule in the result list.

  3. Select the Assign dynamic roles task.

  4. In the Add assignments pane, double-click the dynamic roles you want to assign.

  5. Save the changes.

To change an assignment

  1. In the Manager, select the Organizations > Basic configuration data > Schedules category.

  2. Select the schedule in the result list.

  3. Select the Assign dynamic roles task.

  4. Select the Show objects already assigned to other objects menu item in the assignment form's context menu.

    This shows dynamic roles that are already assigned to other schedules.

  5. In the Add assignments pane, double-click on one of these dynamic roles.

    This dynamic role is assigned to the currently selected schedule.

  6. Save the changes.

NOTE: Assignments cannot be removed. Dynamic roles must be assigned a schedule. It is compulsory.

Related topics

Calculating dynamic roles immediately if objects change

Memberships can be checked immediately by the DBQueue Processor and changed as necessary when object properties are changed. For each dynamic role, you can define which properties trigger a recalculation of role memberships if they are changed.

Requirements for immediate recalculation

  • The configuration parameters for immediate recalculation are set. Check the following configuration parameters in the Designer and set them if necessary.

    • QER | Structures | DynamicGroupCheck: The configuration parameter controls the generation of calculation tasks for dynamic roles.

      If the configuration parameter is not set, the subparameters do not apply.

    • QER | Structures | DynamicGroupCheck | CalculateImmediatelyPerson: If the configuration parameter is set, a calculation task is immediately queued for the DBQueue Processor when changes are made to employees or employee-related objects.

    • QER | Structures | DynamicGroupCheck | CalculateImmediatelyHardware: If the configuration parameter is set, a calculation task is immediately queued for the DBQueue Processor when changes are made to devices or device-related objects.

    • QER | Structures | DynamicGroupCheck | CalculateImmediatelyWorkdesk: If the configuration parameter is set, a calculation task is immediately queued for the DBQueue Processor when changes are made to workstations or workstation-related objects.

  • The Immediate recalculation of assignments option is enabled for the dynamic roles. The properties that trigger recalculation are defined.

  • The No recalculation of assignments option is not enabled for the dynamic roles.

To enable immediate recalculation of a dynamic role

  1. In the Manager, select the role for which the dynamic role was created.

  2. Open the role's overview form.

  3. Select Dynamic roles and click on the dynamic role.

  4. Select the Change main data task.

  5. Enable the Immediate recalculation of assignments option.

  6. On the Recalculation properties tab, add the properties that trigger recalculation of the dynamic role.

    1. Click Add.

    2. Next to the Property field, click .

    3. Under Property, select the table and column to trigger recalculation.

    4. Click OK.

    5. Repeat these steps for all properties.

  7. Save the changes.

Related topics

Editing properties for immediate recalculation

For individual dynamic roles, you can define which properties trigger a recalculation of role memberships if they are changed.

To add a property

  1. In the Manager, select the role for which the dynamic role was created.

  2. Open the role's overview form.

  3. Select Dynamic roles and click on the dynamic role.

  4. Select the Change main data task.

  5. On the Recalculation Properties tab, add the properties.

    1. Click Add.

    2. Next to the Property field, click .

    3. Under Property, select the table and column to trigger recalculation.

    4. Click OK.

  6. Save the changes.

To disable a property

  1. In the Manager, select the role for which the dynamic role was created.

  2. Open the role's overview form.

  3. Select Dynamic roles and click on the dynamic role.

  4. Select the Change main data task.

  5. On the Recalculation properties tab, select the column in the list and check the Disabled option.

  6. Save the changes.

To remove a property

  1. In the Manager, select the role for which the dynamic role was created.

  2. Open the role's overview form.

  3. Select Dynamic roles and click on the dynamic role.

  4. Select the Change main data task.

  5. On the Recalculation Properties tab, select the column in the list and click Remove.

  6. Save the changes.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating