立即与支持人员聊天

获得即时帮助
完成注册

登录

请求定价

联系销售人员

Identity Manager 9.1.3 - Administration Guide for Connecting to SharePoint

Managing SharePoint environments

Architecture overview One Identity Manager users for managing SharePoint Claims-based authentication

Setting up SharePoint farm synchronization

Users and permissions for synchronizing with a SharePoint farm Setting up the synchronization server Creating a synchronization project for initial synchronization of a SharePoint farm Special synchronization cases for valid permissions Displaying synchronization results Customizing the synchronization configuration

How to configure SharePoint synchronization Configuring synchronization of several SharePoint farms Changing system connection settings of SharePoint farms

Editing connection parameters in the variable set Editing target system connection properties

Updating schemas

Speeding up synchronization with revision filtering Post-processing outstanding objects Configuring the provisioning of memberships Configuring single object synchronization Accelerating provisioning and single object synchronization Help for analyzing synchronization issues Disabling synchronization Synchronizing single objects Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)

Basic data for managing a SharePoint environment

Authentication modes Prefixes Zones and alternative URLs SharePoint site templates SharePoint permissions SharePoint quotas SharePoint languages Editing a server

Main data for a Job server Specifying server functions

Target system managers Setting up account definitions

Creating an account definition

Main data for an account definition

Creating manage levels

Main data for manage levels

Creating a formatting rule for IT operating data Collecting IT operating data Modify IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions to the IT Shop

Assigning account definitions to a target system Deleting an account definition

SharePoint farms

General main data of a SharePoint farm Editing synchronization projects

SharePoint web applications SharePoint site collections and sites

SharePoint site collections

General main data of a site collection Specifying categories for inheriting SharePoint groups

SharePoint sites

General main data of a site Address data for a site Site design properties Additional tasks for managing sites Passing on permissions to child sites

Setting up SharePoint site collections and sites

SharePoint user accounts

Supported user account types Entering main data of SharePoint user accounts

Group authenticated user account main data User authenticated user account main data

Additional tasks for managing SharePoint user accounts

Displaying the SharePoint user account overview Assigning SharePoint groups directly to a SharePoint user account Assigning SharePoint roles directly to user accounts Assigning extended properties

Using custom authentication modes Assigning employees automatically to SharePoint user accounts

Editing search criteria for automatic employee assignment

Deleting and restoring SharePoint user accounts

SharePoint roles and groups

SharePoint groups

Entering main data of SharePoint groups Assigning SharePoint groups to SharePoint user accounts

Assigning SharePoint groups to departments, cost centers and locations Assigning SharePoint groups to business roles Assigning SharePoint user accounts directly to a SharePoint group Assigning SharePoint roles to SharePoint groups Adding SharePoint groups to system roles Adding SharePoint groups to the IT Shop Adding SharePoint groups automatically to the IT Shop

Additional tasks for managing SharePoint groups

Displaying an overview of SharePoint groups Effectiveness of group memberships SharePoint group inheritance based on categories Assigning extended properties to SharePoint groups

Deleting SharePoint groups Default solutions for requesting SharePoint groups

Adding SharePoint groups SharePointRequesting Groups Memberships

SharePoint roles and permission levels

Entering main data of SharePoint permission levels Additional tasks for managing SharePoint permission levels

Displaying the SharePoint permission level overview Assigning permissions

Special synchronization cases for valid permissions Entering main data of SharePoint roles Assigning SharePoint roles to SharePoint user accounts

Assigning SharePoint roles to departments, cost centers and locations Assigning SharePoint roles to business roles Assigning SharePoint user accounts directly to a SharePoint role Assigning SharePoint groups to SharePoint roles Adding SharePoint roles to system roles Adding SharePoint roles to the IT Shop

Additional tasks for managing SharePoint roles

Displaying the SharePoint rules overview Effectiveness of SharePoint roles Assigning extended properties to SharePoint roles

Deleting SharePoint roles and permission levels

Permissions for SharePoint web applications

SharePoint permission policies SharePoint user policies

Reports about SharePoint objects

Overview of all assignments

Configuration parameters for managing a SharePoint environment Default project template for SharePoint

Assigning SharePoint groups to SharePoint roles

In order for SharePoint user accounts to obtain permissions for individual websites, assign SharePoint roles to the groups. SharePoint roles and groups must belong to the same site collection.

NOTE: SharePoint roles with the Hidden option that reference permission levels, cannot be assigned to groups.

To assign groups to a SharePoint role

Select the SharePoint > Roles category.
Select the role in the result list.
Select the Assign groups task.
In the Add assignments pane, assign groups.
- OR -

In the Remove assignments pane, remove groups.
Save the changes.

Related topics

Adding SharePoint roles to system roles

Installed modules:

System Roles Module

Use this task to add a SharePoint role to system roles. If you assign a system role to employees, all authenticated user accounts owned by these employees inherit the SharePoint role.

NOTE: If the SharePoint role references a permission level for which the Hidden option is enabled, system roles cannot be assigned. These SharePoint roles cannot be assigned to user accounts or groups, either directly or indirectly. For more information, see Entering main data of SharePoint permission levels.

NOTE: SharePoint roles with the Only use in IT Shop option set, can only be assigned to system roles that also have this option set. For more information, see theOne Identity Manager System Roles Administration Guide.

To assign a SharePoint role to system roles

Select the SharePoint > Roles category.
Select the role in the result list.
Select the Assign system roles task.
In the Add assignments pane, assign system roles.
TIP: In the Remove assignments pane, you can remove the system role assignment.

To remove an assignment
- Select the system role and double-click .
Save the changes.

Related topics

Adding SharePoint roles to the IT Shop

Once a SharePoint role has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed.

The SharePoint role must be labeled with the IT Shop option.
The SharePoint role must be assigned to a service item.
The SharePoint role must be also labeled with the Only use in IT Shop option if the SharePoint role can only be assigned to employees using IT Shop requests. Direct assignment to hierarchical roles may not be possible.

NOTE: IT Shop administrators can assign SharePoint roles to IT Shop shelves in the case of role-based login. Target system administrators are not authorized to add SharePoint roles in the IT Shop.

To add a SharePoint role to the IT Shop

Select the SharePoint > Roles category.
Select the role in the result list.
Select the Add to IT Shop task.
In the Add assignments pane, assign the IT Shop shelves.
Save the changes.

To remove a SharePoint role from individual IT Shop shelves

Select the SharePoint > Roles category.
Select the role in the result list.
Select the Add to IT Shop task.
In the Remove assignments pane, remove the group from the IT Shop shelves.
Save the changes.

To remove a SharePoint roles from all IT Shop shelves

Select the SharePoint > Roles category.
Select the role in the result list.
Select the Remove from all shelves (IT Shop) task.
Confirm the security prompt with Yes.
Click OK.

The SharePoint role is removed from all shelves by the One Identity Manager Service. All requests and assignment requests are canceled along with the SharePoint role as a result.

Detailed information about this topic

One Identity Manager IT Shop Administration Guide

Related topics

Additional tasks for managing SharePoint roles

After you have entered the main data, you can run the following tasks.

Displaying the SharePoint rules overview

Effectiveness of SharePoint roles

Assigning extended properties to SharePoint roles

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© 2024 One Identity LLC. ALL RIGHTS RESERVED. 使用条款隐私 Cookie Preference Center