立即与支持人员聊天
与支持团队交流

Identity Manager 9.2.1 - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Dynamic roles Departments, cost centers, and locations
One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations Creating and editing departments Creating and editing cost centers Creating and editing locations Setting up IT operating data for departments, cost centers, and locations Assigning identities, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded identities Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Certifying departments, cost centers, and locations Reports about departments, cost centers, and locations
Identity administration
One Identity Manager users for managing identities Basics for managing identities Creating and editing identities Assigning company resources to identities Displaying the origin of identities' roles and entitlements Analyzing role memberships and identity assignments Deactivating and deleting identities Deleting all personal data Limited access to One Identity Manager Changing the certification status of identities Displaying the identities overview Displaying and deleting identities' Webauthn security keys Determining the language for identities Determining identities working hours Manually assigning user accounts to identities Entering tickets for identities Assigning extended properties to identities Reports about identities Basic configuration data for identities
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing identities Configuration parameters for managing devices and workdesks

Starting dynamic role schedules immediately

NOTE: When a schedule is started, all dynamic roles that have this schedule assigned and where the No recalculation of assignments option is not set are recalculated.

To start a schedule immediately

  1. In the Manager, select the Organizations > Basic configuration data > Schedules category.

  2. Select the schedule in the result list.

  3. Select the Start immediately task.

    A message appears confirming that the schedule was started.

Assigning dynamic roles to schedules

Use this task to assign dynamic roles to the selected schedule that will run them. The assignment form displays all the dynamic roles that are assigned this selected schedule.

To assign dynamic roles to a schedule

  1. In the Manager, select the Organizations > Basic configuration data > Schedules category.

  2. Select the schedule in the result list.

  3. Select the Assign dynamic roles task.

  4. In the Add assignments pane, double-click the dynamic roles you want to assign.

  5. Save the changes.

To change an assignment

  1. In the Manager, select the Organizations > Basic configuration data > Schedules category.

  2. Select the schedule in the result list.

  3. Select the Assign dynamic roles task.

  4. Select the Show objects already assigned to other objects menu item in the assignment form's context menu.

    This shows dynamic roles that are already assigned to other schedules.

  5. In the Add assignments pane, double-click on one of these dynamic roles.

    This dynamic role is assigned to the currently selected schedule.

  6. Save the changes.

NOTE: Assignments cannot be removed. Dynamic roles must be assigned a schedule. It is compulsory.

Related topics

Calculating dynamic roles immediately if objects change

Memberships can be checked immediately by the DBQueue Processor and changed as necessary when object properties are changed. For each dynamic role, you can define which properties trigger a recalculation of role memberships if they are changed.

Requirements for immediate recalculation

  • The configuration parameters for immediate recalculation are set. Check the following configuration parameters in the Designer and set them if necessary.

    • QER | Structures | DynamicGroupCheck: The configuration parameter controls the generation of calculation tasks for dynamic roles.

      If the configuration parameter is not set, the subparameters do not apply.

    • QER | Structures | DynamicGroupCheck | CalculateImmediatelyPerson: If the configuration parameter is set, a calculation task is immediately queued for the DBQueue Processor when changes are made to identities or identity-related objects.

    • QER | Structures | DynamicGroupCheck | CalculateImmediatelyHardware: If the configuration parameter is set, a calculation task is immediately queued for the DBQueue Processor when changes are made to devices or device-related objects.

    • QER | Structures | DynamicGroupCheck | CalculateImmediatelyWorkdesk: If the configuration parameter is set, a calculation task is immediately queued for the DBQueue Processor when changes are made to workstations or workstation-related objects.

  • The Immediate recalculation of assignments option is enabled for the dynamic roles. The properties that trigger recalculation are defined.

  • The No recalculation of assignments option is not enabled for the dynamic roles.

To enable immediate recalculation of a dynamic role

  1. In the Manager, select the role for which the dynamic role was created.

  2. Open the role's overview form.

  3. Select Dynamic roles and click on the dynamic role.

  4. Select the Change main data task.

  5. Enable the Immediate recalculation of assignments option.

  6. On the Recalculation properties tab, add the properties that trigger recalculation of the dynamic role.

    1. Click Add.

    2. Next to the Property field, click .

    3. Under Property, select the table and column to trigger recalculation.

    4. Click OK.

    5. Repeat these steps for all properties.

  7. Save the changes.

Related topics

Calculating role memberships for dynamic roles immediately

You can make a single dynamic role calculation immediately

To calculate role membership immediately

  1. In the Manager, select the role for which the dynamic role was created.

  2. Open the role's overview form.

  3. Select Dynamic roles and click on the dynamic role.

  4. Select the Change main data task.

  5. Select the Start recalculation immediately task and close the prompt with OK.

    A processing task for the DBQueue Processor is set in the DBQueue.

Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级