立即与支持人员聊天
与支持团队交流

Identity Manager 8.1.4 - Administration Guide for Connecting to Azure Active Directory

Managing Azure Active Directory environments Setting up synchronization with an Azure Active Directory tenant Basic data for managing an Azure Active Directory environment Azure Active Directory core directories Azure Active Directory user accounts Azure Active Directory groups Azure Active Directory administrator roles Azure Active Directory subscriptions and service plans
Azure Active Directory subscriptions Disabled Azure Active Directory service plans
Reports about Azure Active Directory objects Configuration parameters for managing an Azure Active Directory environment Default project template for Azure Active Directory

Editing master data of disabled Azure Active Directory service plans

To edit disabled service plan master data

  1. Select the Azure Active Directory | Disabled service plans category.
  2. Select the service plan in the result list.
  3. Select the Change master data task.
  4. Edit the service plan’s master data.
  5. Save the changes.
Table 39: Disabled service plan master data

Property

Description
Subscription Name of the subscription.
Service plan Name of the service plan.

IT Shop

Specifies whether the service plan can be requested through the IT Shop. The disabled service plan can be requested by your staff though the Web Portal and granted through a defined approval process. The disabled service plan can still be assigned directly to hierarchical roles.

Only for use in IT Shop

Specifies whether the disabled service plan can only be requested through the IT Shop. The disabled service plan can be requested by your staff though the Web Portal and granted through a defined approval process. The disabled service plan may not be assigned directly to hierarchical roles.

Service item

Service item data for requesting the disabled service plan through the IT Shop.

Category

 Categories for disabled service plan inheritance. User accounts can selectively inherit disabled service plans. To do this, disabled service plans and user accounts are divided into categories. Use this menu to allocate one or more categories to the disabled service plan.
Related topics

Assigning disabled Azure Active Directory service plans to Azure Active Directory user accounts

You can assign disabled service plans directly or indirectly to a user account. In the case of indirect assignment, employees and disabled service plans are assigned to hierarchical roles, such as departments, cost centers, locations, or business roles. The disabled service plans assigned to an employee are calculated from the position in the hierarchy and the direction of inheritance.

If the employee has a user account in Azure Active Directory, disabled service plans belonging to roles are inherited by this user account.

Prerequisites for the indirect assignment of employees to user accounts:

  • Assignment of employees and disabled service plans is permitted for role classes (departments, cost centers, locations, or business roles).
  • User accounts are marked with the Groups can be inherited option.

Furthermore, disabled service plans can be assigned to employees through IT Shop requests. Add employees to a shop as customers so that disabled service plans can be assigned through IT Shop requests. All disabled service plans are assigned to this shop can be requested by the customers. Requested disabled service plans are assigned to the employees after approval is granted.

Detailed information about this topic

Assigning disabled Azure Active Directory service plans directly to departments, cost centers, and locations

Assign disabled service plans to departments, cost centers, and locations in order to assign user accounts to them through these organizations.

To assign a disabled service plan to departments, cost centers, or locations (non role-based login)

  1. Select the Azure Active Directory | Disabled service plans category.
  2. Select the service plan in the result list.
  3. Select the Assign organizations task.

  4. In the Add assignments pane, assign the organizations:

    • On the Departments tab, assign departments.

    • On the Locations tab, assign locations.

    • On the Cost centers tab, assign cost centers.

    TIP: In the Remove assignments pane, you can remove assigned organizations.

    To remove an assignment

    • Select the organization and double-click .

  5. Save the changes.

To assign disabled service plans to a department, cost center, or location (role-based login)

  1. Select the Organizations | Departments category.

    - OR -

    Select the Organizations | Cost centers category.

    - OR -

    Select the Organizations | Locations category.

  2. Select the department, cost center or location in the result list.
  3. Select Assigning disabled Azure Active Directory service plans.

  4. In the Add assignments pane, select the Azure Active Directory subscription and assign the disabled service plans.

    TIP: In the Remove assignments pane, you can remove assigned service plans.

    To remove an assignment

    • Select the service plan and double-click .

  5. Save the changes.
Related topics

Assigning disabled Azure Active Directory service plans to business roles

Installed modules: Business Roles Module

Assign disabled service plans to business roles so that they can be assigned to user accounts through these business roles.

To assign a disabled service plan to a business role (non role-based login)

  1. Select the Azure Active Directory | Disabled service plans category.
  2. Select the service plan in the result list.
  3. Select the Assign business roles task.

  4. In the Add assignments pane, assign business roles.

    TIP: In the Remove assignments pane, you can remove assigned business roles.

    To remove an assignment

    • Select the business role and double-click .

  5. Save the changes.

To assign disabled service plans to a business role (non role-based login)

  1. Select the Business roles | <Role class> category.
  2. Select the business role in the result list.
  3. Select the Assigning disabled Azure Active Directory service plans task.

  4. In the Add assignments pane, select the Azure Active Directory subscription and assign the disabled service plans.

    TIP: In the Remove assignments pane, you can remove assigned service plans.

    To remove an assignment

    • Select the service plan and double-click .

  5. Save the changes.
Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级