Chat now with support
Chat with Support

Identity Manager 9.2.1 - Administration Guide for Connecting to SharePoint

Managing SharePoint environments Setting up SharePoint farm synchronization Basic data for managing a SharePoint environment SharePoint farms SharePoint web applications SharePoint site collections and sites SharePoint user accounts SharePoint roles and groups
SharePoint groups SharePoint roles and permission levels
Permissions for SharePoint web applications Reports about SharePoint objects Configuration parameters for managing a SharePoint environment Default project template for SharePoint

Assigning SharePoint roles to SharePoint user accounts

SharePoint roles can be assigned directly or indirectly to user accounts. In the case of indirect assignment, identities and SharePoint roles are arranged in hierarchical roles. The number of SharePoint roles assigned to an identity is calculated from the position in the hierarchy and the direction of inheritance. If you add an identity to hierarchical roles and the identity owns a user authenticated user account, the user account is added to the SharePoint role. Prerequisites for indirect assignment of identities to user accounts:

  • Assignment of identities and groups is permitted for role classes (departments, cost centers, locations, or business roles).
  • The Group authenticated option is not set in the user accounts.
  • User accounts are labeled with the Roles can be inherited option.
  • User accounts and SharePoint groups belong to the same site collection.

Furthermore, SharePoint roles can be assigned to identities through IT Shop requests. Add identities to a shop as customers so that SharePoint roles can be assigned through IT Shop requests. All SharePoint roles, which are assigned to this shop as products, can be requested by the customers. Requested SharePoint roles are assigned to the identities after approval is granted.

NOTE: SharePoint roles that reference permission levels with have Hidden set, cannot be assigned to business roles and organizations. These SharePoint roles can be neither directly nor indirectly assigned to user accounts or groups.
Detailed information about this topic

Assigning SharePoint roles to departments, cost centers and locations

Assign SharePoint roles to departments, cost centers and locations in order to assign user accounts to them through these organizations.

To assign a SharePoint role to departments, cost centers, or locations (non role-based login)

  1. Select the SharePoint > Roles category.
  2. Select the role in the result list.
  3. Select the Assign organizations task.

  4. In the Add assignments pane, assign the organizations:

    • On the Departments tab, assign departments.

    • On the Locations tab, assign locations.

    • On the Cost centers tab, assign cost centers.

    TIP: In the Remove assignments pane, you can remove assigned organizations.

    To remove an assignment

    • Select the organization and double-click .

  5. Save the changes.

To assign SharePoint roles to departments, cost centers, or locations (role-based login)

  1. Select the Organizations > Departments category.

    - OR -

    Select the Organizations > Cost centers category.

    - OR -

    Select the Organizations > Locations category.

  2. Select the department, cost center, or location in the result list.
  3. Select the Assign SharePoint roles task.
  4. In the Add assignments pane, assign SharePoint roles.

    - OR -

    In the Remove assignments pane, remove SharePoint roles.

  5. Save the changes.
Related topics

Assigning SharePoint roles to business roles

Installed modules: Business Roles Module

You assign SharePoint roles to business roles in order to assign them to user accounts over business roles.

To assign a SharePoint role to business roles (non role-based login)

  1. Select the SharePoint > Roles category.
  2. Select the role in the result list.
  3. Select the Assign business roles task.
  4. In the Add assignments pane, assign business roles.

    - OR -

    In the Remove assignments pane, remove business roles.

  5. Save the changes.

To assign SharePoint roles to a business role (non role-based login)

  1. Select the Business roles > <role class> category.
  2. Select the business role in the result list.
  3. Select the Assign SharePoint roles task.
  4. In the Add assignments pane, assign SharePoint roles.

    - OR -

    In the Remove assignments pane, remove SharePoint roles.

  5. Save the changes.
Related topics

Assigning SharePoint user accounts directly to a SharePoint role

SharePoint roles can be assigned directly or indirectly to user accounts. Indirect assignment can only be used for user authenticated user accounts. Direct assignment can only be used for group and user authenticated user accounts.

User accounts and SharePoint roles must belong to the same site collection.

NOTE: SharePoint roles that reference permission levels and have the option hidden set, cannot be assigned to user accounts.

To assign a SharePoint role directly to user accounts

  1. Select the SharePoint > Roles category.
  2. Select the role in the result list.
  3. Select the Assign user accounts task.
  4. In the Add assignments pane, assign user accounts.

    - OR -

    In the Remove assignments pane, remove user accounts.

  5. Save the changes.
Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating