立即与支持人员聊天
与支持团队交流

Identity Manager 8.1.4 - Administration Guide for Connecting to Azure Active Directory

Managing Azure Active Directory environments Setting up synchronization with an Azure Active Directory tenant Basic data for managing an Azure Active Directory environment Azure Active Directory core directories Azure Active Directory user accounts Azure Active Directory groups Azure Active Directory administrator roles Azure Active Directory subscriptions and service plans
Azure Active Directory subscriptions Disabled Azure Active Directory service plans
Reports about Azure Active Directory objects Configuration parameters for managing an Azure Active Directory environment Default project template for Azure Active Directory

The disabled Azure Active Directory service plans overview

To obtain an overview of a disabled service plan

  1. Select the Azure Active Directory | Disabled service plans category.
  2. Select the service plan in the result list.
  3. Select the Disabled Azure Active Directory service plan overview task.

Effectiveness of assignments of disabled service plans

The procedure described under Effectiveness of group memberships can also be used for disabled service plans. The effect of the assignments is mapped in the AADUserHasDeneiedService and AADBaseTreeHasDeniedService tables through the XIsInEffect column.

Prerequisites
  • The QER | Structures | Inherite | GroupExclusion configuration parameter is set.
  • Mutually exclusive groups belong to the same tenant.

To exclude subscriptions

  1. Select the Azure Active Directory | Disabled service plans category.
  2. Select the disabled service plan from the result list.
  3. Select the Exclude disabled service plans task.
  4. In the Add assignments pane, assign the disabled service plans that are excluded with the selected service plan.

    - OR -

    In the Remove assignments pane, delete the disabled service plans that no longer exclude each other.

  5. Save the changes.

Inheritance of disabled Azure Active Directory service plans based on categories

The procedure described under Azure Active Directory group inheritance based on categories can also be used for disabled service plans.

To use inheritance through categories

  • Define the categories in the tenant.
  • Assign categories to user accounts through their master data.
  • Assign categories to disabled service plans through their master data.
Related topics

Assigning extended properties to disabled Azure Active Directory service plans

Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.

To specify extended properties for a disabled service plan

  1. Select the Azure Active Directory | Disabled service plans category.
  2. Select the service plan in the result list.
  3. Select the Assign extended properties task.
  4. In the Add assignments pane, assign extended properties.

    TIP: In the Remove assignments pane, you can remove assigned extended properties.

    To remove an assignment

    • Select the extended property and double-click .
  5. Save the changes.

For detailed information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级