立即与支持人员聊天
与支持团队交流

Identity Manager 9.2 - IT Shop Administration Guide

Setting up an IT Shop solution
One Identity Manager users in the IT Shop Implementing the IT Shop Using the IT Shop with the Application Governance Module Requestable products Preparing products for requesting Assigning and removing products Preparing the IT Shop for multi-factor authentication Assignment requests Delegations Creating IT Shop requests from existing user accounts, assignments, and role memberships Adding system entitlements automatically to the IT Shop Deleting unused application roles for product owners
Approval processes for IT Shop requests
Approval policies for requests Approval workflows for requests Determining effective approval policies Selecting responsible approvers Request risk analysis Testing requests for rule compliance Approving requests from an approver Automatically approving requests Approval by peer group analysis Approval recommendations for requests Gathering further information about a request Appointing other approvers Escalating an approval step Approvers cannot be established Automatic approval on timeout Halting a request on timeout Approval by the chief approval team Approving requests with terms of use Using default approval processes
Request sequence
The request overview Requesting products more than once Requests with limited validity period Relocating a customer or product to another shop Changing approval workflows of pending requests Requests for employees Requesting change of manager for an employee Canceling requests Unsubscribe products Notifications in the request process Approval by mail Adaptive cards approval Requests with limited validity period for changed role memberships Requests from permanently deactivated identities Deleting request procedures and deputizations
Managing an IT Shop
IT Shop base data Setting up IT Shop structures Setting up a customer node Deleting IT Shop structures Restructuring the IT Shop Templates for automatically filling the IT Shop Custom mail templates for notifications Product bundles Recommendations and tips for transporting IT Shop components with the Database Transporter
Troubleshooting errors in the IT Shop Configuration parameters for the IT Shop Request statuses Examples of request results

General main data of IT Shop structures

On the General tab, enter the following main data of a shopping center, shop, or a shelf.

Table 69: General main data of an IT Shop structure

Property

Description

IT Shop node

IT Shop structure name.

Internal name

Internal IT Shop structure name.

IT Shop information

 The structure of the IT Shop is governed by this data The IT Shop structure is regulated by this data. In the menu, select Shopping center, Shop, or Shelf.

The menu is only displayed when you insert a new IT Shop structure.

Role type

Role types for classifying shops and shelves. In the menu, select a role type.

  • Shopping center: N/A

  • Shop: You can use role types to classify shops further. The role type for shops does not influence how the approval policies in effect are determined.

  • Shelf: You can use role types to limit the approval policies in effect.

Shelf template

Template to automatically fill shelves.

  • Shopping center: Select a shopping center template from the menu. A shopping center template cannot be assigned until the shopping center has been saved in the database.

  • Shop: N/A

  • Shelf: For shelves created by automatic filling of the shop, the reference to the shelf template used is entered. Shelf templates are only assigned automatically.

Parent IT Shop node

Parent IT Shop nodes in the IT Shop hierarchy.

  • Shopping center: Leave this empty. Shopping centers always form the root node of an IT Shop.

  • Shop: If the shop is at the top level of an IT Shop, this field stays empty.

    If the shop is in a shopping center, select the shopping center from the menu. You can use this input field to add shops to shopping centers later.

  • Shelf: In the menu, select the shop to add the shelf to.

    After saving the rule, the shop cannot be changed again.

Full name

Full name of the IT Shop structure.

Location

Location of the IT Shop structure. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.

Department

Department the IT Shop structure is in. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.

Cost center

Cost enter of the IT Shop structure. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.

Owner

The identity responsible for the IT Shop structure. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.

2nd Manager

The owner's deputy. You can use this input when creating approval policies for making requests from this shopping center/shop/shelf.

Attestors

 Applications role whose members are authorized to approve attestation cases for this IT Shop structure.

To create a new application role, click . Enter the application role name and assign a parent application role.

NOTE:This property is available if the Attestation Module is installed.

Description

Text field for additional explanation.

Certification status

Certification status of the IT Shop structure. You can select the following certification statuses:

  • New: The IT Shop structure was newly added to the One Identity Manager database.

  • Certified: The IT Shop structure's main data was granted approval by the manager.

  • Denied: The IT Shop structure's main data was denied approval by the manager.

Detailed information about this topic
Related topics

Custom main data of IT Shop structures

Additional company-specific information. Use the Designer to customize display names, formats, and templates for the input fields.

Assigning approval policies

You can assign approval policies to a shopping center, shops, and shelves. These are applied to all request from this IT Shop structure if a child IT Shop structure or the requested service items are not assigned to approval policies. The approval policy that takes effect on the IT Shop structure is shown in the overview.

To assign an IT Shop structure to an approval policy.

  1. In the Manager, select the IT Shop > IT Shop or the IT Shop > IT Shop > <IT Shop structure> category.

  2. Select the IT Shop structure in the result list.

  3. Select the Assign approval policies task.

    In the Add assignments pane, assign the approval policies.

    TIP: In the Remove assignments pane, you can remove approval policy assignments.

    To remove an assignment

    • Select the approval policy and double-click .

  4. Save the changes.
Related topics

Assigning requestable products to shelves

Assign a shelf those company resources that the shop customers are permitted to request as products. These company resources are added as product nodes below the shelf. You can only select those company resources that are labeled with the IT Shop option and to which a service item is assigned.

To assign company resources, select one of the tasks in the task view. The tasks are only shown if the Assignments permitted and Direct assignment permitted options are enabled for the IT Shop structure role class.

To assign company resources as products to a shelf

  1. In the Manager, select the IT Shop > IT Shop > <shop> category or the IT Shop > IT Shop > <shopping center> > <shop> category.

  2. Select the shelf in the result list.

  3. Select the Assign <company resource> task.

    In the Add assignments pane, assign company resources..

    TIP: In the Remove assignments pane, you can remove company assignments.

    To remove an assignment

    • Select the company resource and double-click .

  4. Save the changes.
Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级