立即与支持人员聊天
与支持团队交流

Identity Manager 8.1.4 - Administration Guide for Connecting to Azure Active Directory

Managing Azure Active Directory environments Setting up synchronization with an Azure Active Directory tenant Basic data for managing an Azure Active Directory environment Azure Active Directory core directories Azure Active Directory user accounts Azure Active Directory groups Azure Active Directory administrator roles Azure Active Directory subscriptions and service plans
Azure Active Directory subscriptions Disabled Azure Active Directory service plans
Reports about Azure Active Directory objects Configuration parameters for managing an Azure Active Directory environment Default project template for Azure Active Directory

Adding Azure Active Directory subscriptions to system roles

Installed modules: System Roles Module

Use this task to add a subscription to system roles. When you assign a system role to an employee, the subscription is inherited by all user accounts owned by these employees.

NOTE: Subscriptions in which the Only use in IT Shop option is set can only be assigned to system roles that also have this option set. For more information, see the One Identity Manager System Roles Administration Guide.

To assign a subscription to a system role

  1. Select the Azure Active Directory | Subscriptions category.
  2. Select a subscription in the result list.
  3. Select the Assign system roles task.

  4. In the Add assignments pane, assign system roles.

    TIP: In the Remove assignments pane, you can remove assigned system roles.

    To remove an assignment

    • Select the system role and double-click .

  5. Save the changes.
Related topics

Adding Azure Active Directory subscriptions to the IT Shop

Once a subscription is assigned to an IT Shop shelf, it can be requested by customers. To ensure it can be requested, further prerequisites need to be guaranteed:

  • The subscription must be labeled with the IT Shop option.
  • The subscription must be assigned to a service item.
  • If the subscription is only supposed to be available to employees through IT Shop requests, the subscription must also be labeled with the Only for use in IT Shop option. Direct assignment to hierarchical roles may not be possible.
NOTE: IT Shop administrators can assign subscriptions to IT Shop shelves in the case of role-based login. Target system administrators are not authorized to add subscriptions in the IT Shop.

To add a subscription in the IT Shop

  1. Select the Azure Active Directory | Subscriptions (non role-based login) category.

    - OR -

    Select the Entitlements | Azure Active Directory subscriptions (role-based login) category.

  2. Select a subscription in the result list.
  3. Select the Add to IT Shop task.
  4. In the Add assignments pane, assign the subscription to the IT Shop shelves.
  5. Save the changes.

To remove a subscription from individual IT Shop shelves

  1. Select the Azure Active Directory | Subscriptions (non role-based login) category.

    - OR -

    Select the Entitlements | Azure Active Directory subscriptions (role-based login) category.

  2. Select a subscription in the result list.
  3. Select the Add to IT Shop task.
  4. In the Remove assignments pane, remove the subscription from the IT Shop shelves.
  5. Save the changes.

To remove a subscription from all IT Shop shelves

  1. Select the Azure Active Directory | Subscriptions (non role-based login) category.

    - OR -

    Select the Entitlements | Azure Active Directory subscriptions (role-based login) category.

  2. Select a subscription in the result list.
  3. Select the Remove from all shelves (IT Shop) task.
  4. Confirm the security prompt with Yes.
  5. Click OK.

    The subscription is removed from all shelves by One Identity Manager Service. All request and assignment requests for this subscription are canceled in the process.

For more detailed information about requesting company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related topics

Additional tasks for managing Azure Active Directory subscriptions

After you have entered the master data, you can run the following tasks.

The Azure Active Directory subscriptions overview

To obtain an overview of a subscription

  1. Select the Azure Active Directory | Subscriptions category.
  2. Select a subscription in the result list.
  3. Select the Azure Active Directory subscription overview task.

To obtain an overview of a service plan

  1. Select the Azure Active Directory | Service plans category.
  2. Select the service plan in the result list.
  3. Select the Azure Active Directory service plan overview task.

To obtain an overview of a disabled service plan

  1. Select the Azure Active Directory | Disabled service plans category.
  2. Select the service plan in the result list.
  3. Select the Disabled Azure Active Directory service plan overview task.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级