Identity Manager 8.1.4 - Administration Guide for Connecting to Azure Active Directory

Once an administrator role has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed:

• The administrator role must be labeled with the IT Shop option.
• The administrator role must be assigned to a service item.
• If the administrator role can only be assigned to employees using IT Shop requests, the administrator role must be also labeled with the Only use in IT Shop option. Direct assignment to hierarchical roles may not be possible.

To add an administrator role in the IT Shop

1. Select the Azure Active Directory | Administrator roles (non role-based login) category.

   - OR -

   Select the Entitlements | Azure Active Directory administrator roles (role-based login) category.

2. Select the administrator role in the result list.
3. Select the Add to IT Shop task.
4. In the Add assignments pane, assign the administrator role to the IT Shop shelves.
5. Save the changes.

To remove an administrator role from individual IT Shop shelves

1. Select the Azure Active Directory | Administrator roles (non role-based login) category.

   - OR -

   Select the Entitlements | Azure Active Directory administrator roles (role-based login) category.

2. Select the administrator role in the result list.
3. Select the Add to IT Shop task.
4. In the Remove assignments pane, remove the administrator role from the IT Shop shelves.
5. Save the changes.

To remove an administrator role from all IT Shop shelves

1. Select the Azure Active Directory | Administrator roles (non role-based login) category.

   - OR -

   Select the Entitlements | Azure Active Directory administrator roles (role-based login) category.

2. Select the administrator role in the result list.
3. Select the Remove from all shelves (IT Shop) task.
4. Confirm the security prompt with Yes.
5. Click OK.

   The administrator role is removed from all shelves by the One Identity Manager Service. All requests and assignment requests with this administrator role are canceled at the same time.

For more detailed information about requesting company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related topics

• Editing master data of Azure Active Directory administrator roles
• Assigning Azure Active Directory administrator roles to departments, cost centers, and locations
• Assigning Azure Active Directory administrator roles to business roles
• Assigning Azure Active Directory user accounts directly to Azure Active Directory administrator roles
• Adding Azure Active Directory administrator roles to system roles