立即与支持人员聊天
与支持团队交流

Identity Manager 8.2.1 - Administration Guide for Connecting to LDAP

About this guide Managing LDAP environments Synchronizing LDAP directories
Setting up initial LDAP directory synchronization Adjusting the synchronization configuration for LDAP environments Running synchronization Tasks following synchronization Troubleshooting Ignoring data error in synchronization
Managing LDAP user accounts and employees Managing memberships in LDAP groups Login information for LDAP user accounts Mapping LDAP objects in One Identity Manager Handling of LDAP objects in the Web Portal Basic data for managing an LDAP environment Troubleshooting Configuration parameters for managing an LDAP environment Default project template for LDAP Generic LDAP connector settings LDAP connector V2 settings

Assigning extended properties to LDAP groups

Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.

For more detailed information about setting up extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

To specify extended properties for a group

  1. In the Manager, select the LDAP > Groups category.

  2. Select the group in the result list.

  3. Select Assign extended properties.

  4. In the Add assignments pane, assign extended properties.

    TIP: In the Remove assignments pane, you can remove assigned extended properties.

    To remove an assignment

    • Select the extended property and double-click .

  5. Save the changes.

Adding LDAP groups to LDAP groups

Use this task to add a group to another group. This means that the groups can be hierarchically structured.

To assign groups directly to a group as members

  1. In the Manager, select the LDAP > Groups category.

  2. Select the group in the result list.

  3. Select the Assign groups category.

  4. Select the Has members tab.

  5. Assign child groups in Add assignments.

    TIP: In the Remove assignments pane, you can remove the assignment of groups.

    To remove an assignment

    • Select the group and double-click .

  6. Save the changes.

To add a group as a member of other groups

  1. In the Manager, select the LDAP > Groups category.

  2. Select the group in the result list.

  3. Select the Assign groups task.

  4. Select the Is member of tab.

  5. In the Add assignments pane, assign parent groups.

    TIP: In the Remove assignments pane, you can remove the assignment of groups.

    To remove an assignment

    • Select the group and double-click .

  6. Save the changes.

Deleting LDAP groups

The group is deleted permanently from the One Identity Manager database and from LDAP.

To delete a group

  1. In the Manager, select the LDAP > Groups category.

  2. Select the group in the result list.

  3. Click in the result list.

  4. Confirm the security prompt with Yes.

Displaying the LDAP group overview

Use this task to obtain an overview of the most important information about a group.

To obtain an overview of a group

  1. In the Manager, select the LDAP > Groups category.

  2. Select the group in the result list.

  3. Select the LDAP group overview task.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级