立即与支持人员聊天
与支持团队交流

Identity Manager 9.1.1 - Web Portal User Guide

General tips and getting started Requests
Setting up and configuring request functions Requesting products Saved for Later list Managing my request templates Pending requests Displaying request history Canceling requests Renewing products with limit validity periods Unsubscribing products Displaying approvals Undoing approvals
Attestation Compliance Responsibilities
My responsibilities
Managing my departments Managing my application roles Managing my business roles Managing my identities Managing my cost centers Managing my locations Managing my system entitlements Managing my system roles
Delegating tasks Ownerships
Managing data
Managing identities Managing user accounts Managing system entitlements Managing departments Managing locations Managing cost centers Managing business roles Managing system roles
Appendix: Attestation conditions and approval policies from attestation procedures

Requesting new Active Directory groups

To create a new Active Directory group, you must request either the Create an Active Directory security group product or the Create an Active Directory distribution group product.

To request a new Active Directory group

  1. In the menu bar, click Requests > New request.

  2. On the New Request page, click Show products from service category.

  3. In the Service category pane, click the Active Directory groups service category.

  4. Perform one of the following actions:

    • To request a new Active Directory security group, click the New Active Directory security group tile.

    • To request a new Active Directory distribution group, click the New Active Directory distribution group tile.

  5. Click Add to cart.

  6. In the Request Details pane, perform one of the following actions:

    • As a requester without responsibility for the target system, enter a name for the new group in the Suggested name field.

    • As the target system manager, provide additional details about the new group:

      • Name: Enter a name for the group.

      • Group scope: Select the scope that specifies the range of the group's usage within the domain or forest. The group's scope specifies where the group is allowed to issue permissions. You can select one of the following group scopes:

        • Global group: Global groups can be used to provide cross-domain authorizations. Members of a global group are only user accounts, computers, and groups belonging to the global group’s domain.

        • Local: Local groups are used when authorizations are issued within the same domain. Members of a domain local group can be user accounts, computers, or groups in any domain.

        • Universal: Universal groups can be used to provide cross-domain authorizations available. Universal group members can be user accounts and groups from all domains in one domain structure.

      • Container: Click Assign and select a container for the group.

  7. Click Apply.

  8. Click Submit.

    TIP: You can also add more products to your shopping cart and configure various settings. For more information, see Managing products in the shopping cart.

  9. On the Shopping Cart page, click Submit.

Related topics

Requesting changes to Active Directory groups

To change the type or scope of Active Directory groups, you must request the Change an Active Directory group product.

To change an Active Directory group

  1. In the menu bar, click Requests > New request.

  2. On the Request page, click Show products from service category.

  3. In the Service category pane, click the Active Directory groups service category.

  4. Click the Modify Active Directory group tile.

  5. Click Add to cart.

  6. In the Request Details pane, in the Active Directory group menu, select the Active Directory group that you want to change.

  7. (Optional) In the Group scope menu, select the scope that specifies the range of the group's usage within the domain or forest. The group's scope specifies where the group is allowed to issue permissions. You can select one of the following group scopes:

    • Global group: Global groups can be used to provide cross-domain authorizations. Members of a global group are only user accounts, computers, and groups belonging to the global group’s domain.

    • Local: Local groups are used when authorizations are issued within the same domain. Members of a domain local group can be user accounts, computers, or groups in any domain.

    • Universal: Universal groups can be used to provide cross-domain authorizations available. Universal group members can be user accounts and groups from all domains in one domain structure.

  8. (Optional) In the Type menu, select the type of Active Directory group (security or distribution group).

  9. Click Apply.

  10. Click Submit.

    TIP: You can also add more products to your shopping cart and configure various settings. For more information, see Managing products in the shopping cart.

  11. On the Shopping Cart page, click Submit.

Requesting deletion of Active Directory groups

To delete Active Directory groups you must request the Delete Active Directory group product.

To delete an Active Directory group

  1. In the menu bar, click Requests > New request.

  2. On the New Request page, click Show products from service category.

  3. In the Service category pane, click the Active Directory groups service category.

  4. Click the Delete Active Directory Group tile.

  5. Click Add to cart.

  6. In the Request Details pane, in the Active Directory group to delete menu, select the Active Directory group that you want to delete.

  7. Click Apply.

  8. Click Submit.

    TIP: You can also add more products to your shopping cart and configure various settings. For more information, see Managing products in the shopping cart.

  9. On the Shopping Cart page, click Submit.

Requesting new SharePoint groups

To create a new SharePoint group, you must request the New SharePoint Group product.

To request a new SharePoint group

  1. In the menu bar, click Requests > New request.

  2. On the New Request page, click Show products from service category.

  3. In the Service category pane, click the SharePoint groups service category.

  4. Click the New SharePoint group tile.

  5. Click Add to cart.

  6. In the Request Details pane, perform one of the following actions:

    • As a requester without responsibility for the target system, enter a name for the new group in the Suggested name field.

    • As the target system manager, provide additional details about the new group:

      • Site collection: Select a site collection where the group will be applied. A site collection groups sites together. User account and their access permissions are managed on the sites.

      • Display name: Enter a name for the new group.

      • Description: Enter a description for the SharePoint group.

  7. Click Apply.

  8. Click Submit.

    TIP: You can also add more products to your shopping cart and configure various settings. For more information, see Managing products in the shopping cart.

  9. On the Shopping Cart page, click Submit.

Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级