Identity Manager 9.3 - Administration Guide for Connecting to Exchange Online

Identity to use the mail contact.

• An identity is already entered if the mail contact was generated by an account definition.

• If you create the mail contact manually, you can select an identity from the drop-down.

  The drop-down displays activated and deactivated identities by default. If you do not want to see any deactivated identities, set the QER | Person| HideDeactivatedIdentities configuration parameter.

Specifies whether the contact is intentionally not assigned an identity. The option is automatically set if a contact is included in the exclusion list for automatic identity assignment or a corresponding attestation is carried out. You can set the option manually. Enable the option if the contact does not need to be linked with an identity (for example, if several identities use the contact).

If attestation approves these contacts, these contacts will not be submitted for attestation in the future. In the Web Portal, contact that are not linked to an identity can be filtered according to various criteria.

Indicates why the No link to an identity required option is enabled for this contact. Possible values:

• By administrator: The option was set manually by the administrator.

• By attestation: The contact was attested.

• By exclusion criterion: The contact is not associated with an identity due to an exclusion criterion. For example, the contact is included in the exclude list for automatic identity assignment (configuration parameter PersonExcludeList).

Account definition through which the mail contact was created.

Use the account definition to automatically populate mail contact main data and to specify a manage level for the mail contact. One Identity Manager finds the IT operating data of the assigned identity and uses it to populate the corresponding fields in the mail contact.

Manage level with which the mail contact is created. Select a manage level from the drop-down. You can only specify the manage level can if you have also entered an account definition. All manage levels of the selected account definition are available in the drop-down.

The Microsoft Entra ID tenant’s name.

The contact’s first name. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

The contact's last name. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

The contact’s initials. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

The mail contact’s identifier.

Name as used in the address book.

Unique alias for further identification of the mail contact.

Other email addresses for the mail contact. Use the following syntax to set up other proxy addresses:

Address type: new email address

Address type of the email address. Permitted value is SMTP.

Specifies whether the mail contact is visible in address books. Set this option if you want to prevent the mail contact from being displayed in address books. This option applies to all address books.

Maximum risk index value of all assigned groups. The property is only visible if the QER | CalculateRiskIndex configuration parameter is set. For more information, see the One Identity Manager Risk Assessment Administration Guide.

Categories the mail contact uses to inherit groups. Groups can be selectively inherited by mail contacts. To do this, the groups and mail contacts are divided into categories. Select one or more categories from the drop-down.

Specifies whether the mail contact can inherit groups through the identity. If the option is set, the mail contact inherits groups through hierarchical roles, in which the identity is a member, or through IT Shop requests.

• If you add an identity with a user accounts to, for example, a department and you have assigned groups to this department, the mail contact inherits these groups.

• If an identity has requested group membership in the IT Shop and the request is granted approval, the identity's mail contact only inherits the group if the option is set.

Simple display name for systems that cannot interpret all the characters of normal display names.

Display name in phonetic letters. It is used if the pronunciation and spelling of the name do not match. For example, the display name is used to sort recipients in the hierarchical address book if no sort order is given. They are sorted in ascending order from A to Z.

If no phonetic name is given, they are sorted by the display name.

Specifies the order in which to display recipients in the hierarchical address book. The larger the value, the higher the ranking in the sort order.

If no order is given or more than one entries have the same sort order, recipients are sorted by their phonetic display name.

Format for messages that are sent to mail contacts. Permitted values are MIME (default) and Text.

Format for body text of messages that are sent to mail contacts. Options are Text, HTML and TextAndHtml. The permitted values depend on the selected message format.

• If the MIME message formation is fixed, the format of the body text can be Text, HTML and TextAndHtml (default).

• If the message format is Text, the format of the body text can be Text.

Specifies whether the mail contact can receive messages in MAPI format. Available options are Never, Always, and Use default settings.

Specifies whether authentication data is requested from senders. Set this option to prevent anonymous senders mailing the mail contact.

Specifies whether the mail contact is moderated. Use the Assign moderators task to specify the moderators. Then enable the option.

Specifies how senders are notified when they send messages to moderated mail contacts. Permitted values are:

• Do not notify: The sender is not notified.

• Only notify senders in your exchange organization: Only internal senders receive a notification.

• Notify all senders: Internal and external senders receive notification.

Street or road. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

City. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level. Locations can be automatically generated and identities assigned based on the town.

Mailbox. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

State. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

Zip code. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

The country ID.

Office address.

Business telephone numbers. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

Fax number. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

Additional fax numbers.

Additional telephone numbers.

Mobile number. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

Mobile phone number.

Contact's web page.

More information about the contact.

The contact’s job title.

Department. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

Company. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.

Manager responsible for the mail contact.

To specify a manager

1. Click next to the field.
2. In the Table drop-down, select the table that maps the account manager.
3. In the Manager drop-down, select the manager.
4. Click OK.

Name of the mail contact's assistant.