Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 9.2.1 - Administration Guide for Connecting to SharePoint

Table of Contents

Managing SharePoint environments

Architecture overview One Identity Manager users for managing SharePoint Claims-based authentication

Setting up SharePoint farm synchronization

Users and permissions for synchronizing with a SharePoint farm Setting up the synchronization server Creating a synchronization project for initial synchronization of a SharePoint farm Special synchronization cases for valid permissions Displaying synchronization results Customizing the synchronization configuration

How to configure SharePoint synchronization Configuring synchronization of several SharePoint farms Changing system connection settings of SharePoint farms

Editing connection parameters in the variable set Editing target system connection properties

Updating schemas

Speeding up synchronization with revision filtering Post-processing outstanding objects Configuring the provisioning of memberships Configuring single object synchronization Accelerating provisioning and single object synchronization Help for analyzing synchronization issues Disabling synchronization Synchronizing single objects Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)

Basic data for managing a SharePoint environment

Authentication modes Prefixes Zones and alternative URLs SharePoint site templates SharePoint permissions SharePoint quotas SharePoint languages Editing a server

Main data for a Job server Specifying server functions

Target system managers Setting up account definitions

Creating an account definition

Main data for an account definition

Creating manage levels

Main data for manage levels

Creating a formatting rule for IT operating data Collecting IT operating data Modify IT operating data Assigning account definitions to identities

Assigning account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all identities Assigning account definitions directly to identities Assigning account definitions to system roles Adding account definitions to the IT Shop

Assigning account definitions to a target system Deleting an account definition

SharePoint farms

General main data of a SharePoint farm Editing synchronization projects

SharePoint web applications SharePoint site collections and sites

SharePoint site collections

General main data of a site collection Specifying categories for inheriting SharePoint groups

SharePoint sites

General main data of a site Address data for a site Site design properties Additional tasks for managing sites Passing on permissions to child sites

Setting up SharePoint site collections and sites

SharePoint user accounts

Supported user account types Entering main data of SharePoint user accounts

Group authenticated user account main data User authenticated user account main data

Additional tasks for managing SharePoint user accounts

Displaying the SharePoint user account overview Assigning SharePoint groups directly to a SharePoint user account Assigning SharePoint roles directly to user accounts Assigning extended properties

Using custom authentication modes Assigning identities automatically to SharePoint user accounts

Editing search criteria for automatic identity assignment

Deleting and restoring SharePoint user accounts

SharePoint roles and groups

SharePoint groups

Entering main data of SharePoint groups Assigning SharePoint groups to SharePoint user accounts

Assigning SharePoint groups to departments, cost centers and locations Assigning SharePoint groups to business roles Assigning SharePoint user accounts directly to a SharePoint group Assigning SharePoint roles to SharePoint groups Adding SharePoint groups to system roles Adding SharePoint groups to the IT Shop Adding SharePoint groups automatically to the IT Shop

Additional tasks for managing SharePoint groups

Displaying an overview of SharePoint groups Effectiveness of group memberships SharePoint group inheritance based on categories Assigning extended properties to SharePoint groups

Deleting SharePoint groups Default solutions for requesting SharePoint groups

Adding SharePoint groups SharePointRequesting Groups Memberships

SharePoint roles and permission levels

Entering main data of SharePoint permission levels Additional tasks for managing SharePoint permission levels

Displaying the SharePoint permission level overview Assigning permissions

Special synchronization cases for valid permissions Entering main data of SharePoint roles Assigning SharePoint roles to SharePoint user accounts

Assigning SharePoint roles to departments, cost centers and locations Assigning SharePoint roles to business roles Assigning SharePoint user accounts directly to a SharePoint role Assigning SharePoint groups to SharePoint roles Adding SharePoint roles to system roles Adding SharePoint roles to the IT Shop

Additional tasks for managing SharePoint roles

Displaying the SharePoint rules overview Effectiveness of SharePoint roles Assigning extended properties to SharePoint roles

Deleting SharePoint roles and permission levels

Permissions for SharePoint web applications

SharePoint permission policies SharePoint user policies

Reports about SharePoint objects

Overview of all assignments

Configuration parameters for managing a SharePoint environment Default project template for SharePoint

SharePointRequesting Groups Memberships

Product owners and target system managers can request members for groups in these shelves in the Web Portal. The respective product owner or target system manager must grant approval for this modification. The changes are published in the target system.

Table 32: Default objects for requesting group memberships
Shelves:	Identity & Access Lifecycle > SharePoint groups
Approval policies/approval workflows:	Approval of group membership requests

Related topics

SharePoint roles and permission levels

You can define so-called permission levels in SharePoint to grant permissions to objects in a site. These permission levels group together different SharePoint permissions. Permission levels with a unique reference to a site are mapped in the One Identity Manager database as SharePoint roles. You can assign SharePoint roles through groups, or directly to user accounts. SharePoint users obtain their permissions for site objects in this way.

Figure 4: SharePoint roles and permission levels in One Identity Manager

Entering main data of SharePoint permission levels

To edit main data of a permission level

Select the SharePoint > Permission levels category.
Select the permission level in the result list. Select the Change main data task.
- OR -

Click in the result list.
Enter the required data on the main data form.
Save the changes.

Enter the following properties for a permission level on the main data form:

Table 33: Properties of a permission level
Property	Description
Permission level	Name of the permission level.
Site	Unique identifier for the site the permission level is added to.
Description	Text field for additional explanation.
Hidden	Specifies whether a SharePoint role with the permission level can be assigned to user accounts or groups.

Additional tasks for managing SharePoint permission levels

After you have entered the main data, you can run the following tasks.

Displaying the SharePoint permission level overview

Assigning permissions

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center