立即与支持人员聊天
与支持团队交流

Identity Manager 8.1.4 - IT Shop Administration Guide

Setting up an IT Shop solution
One Identity Manager users in the IT Shop Implementing the IT Shop Requestable products Preparing products for requesting Assigning and removing products Preparing the IT Shop for multi-factor authentication Assignment requests and delegating Creating IT Shop requests from existing user accounts, assignments, and role memberships Adding Active Directory and SharePoint groups to the IT Shop automatically Adding Privileged Account Management user groups to the IT Shop automatically
Approval processes for IT Shop requests
Approval policies for requests Approval workflows for requests Determining the effective approval policies Selecting responsible approvers Request risk analysis Testing requests for rule compliance Approving requests from an approver Automatically approving requests Approval by peer group analysis Gathering further information about a request Appointing other approvers Escalating an approval step Approvers cannot be established Automatic approval on timeout Cancel request on timeout Approval by the chief approval team Approving requests with terms of use Using default approval processes
Request sequence Managing an IT Shop
IT Shop base data Setting up IT Shop structures Setting up a customer node Deleting IT Shop structures Templates for automatically filling the IT Shop Custom mail templates for notifications Request templates
Resolving errors in the IT Shop Configuration parameters for the IT Shop Request statuses Examples of request results

The tags overview

The overview form contains the most important information about a tag.

To get an overview of a tag

  1. In the Manager, select the IT Shop | Basic configuration data | Tags category.

  2. Select a tag in the result list.

  3. Select the Tag overview task.

Assigning service items

Assign service items to the tags so that you can use the tags as search terms in the Web Portal. The Web Portal finds all the requestable service items assigned to a tag.

To assign a tag to a service item

  1. In the Manager, select the IT Shop | Basic configuration data | Tags category.

  2. Select a tag in the result list.

  3. Select the Assign service items task.

    In the Add assignments pane, assign service items.

    TIP: In the Remove assignments pane, you can remove service item assignments.

    To remove an assignment

    • Select the service item and double-click .

  4. Save the changes.

Assigning and removing products

Once you have prepared the product to be requested, assign it to a shelf or a shelf template. A shelf has several tasks available for assigning and removing products.

NOTE: The tasks are only displayed if the Assignments permitted and Direct assignment permitted options are enabled for the IT Shop structure or IT Shop template role classes.
Table 15: Tasks for assigning and removing requestable products

Products

Task

Software

Assign software

Resources

Assign resource

Multi-request resources

Assign resource

Multi-requestable/unsubscribable resources

Assign resource

System roles

Assign system roles

Groups of custom target systems

Assign groups of custom target systems

Active Directory groups

Active Directory Assign groups

Azure Active Directory permissions

Azure Active Directory Assign groups

Azure Active Directory Assign administrator roles

Azure Active Directory assign subscriptions

Assigning disabled Azure Active Directory service plans

SharePoint permissions

SharePoint Assign groups

Assign SharePoint roles

LDAP groups

LDAP Assign groups

IBM Notes groups

Notes Assign groups

SAP R/3 permissions

Assign BI analysis authorizations

SAP Assign groups

Assign SAP profiles

Assign SAP roles

Assigning structural profiles

E-Business Suite permissions

Assign E-Business Suite authorizations

Exchange Online permissions

Assign Exchange Online mail-enabled distribution groups

Office 365 Assign groups

Privileged Account Management permissions

Assign PAM user groups

SharePoint Online permissions

SharePoint Online Assign groups

Assign SharePoint Online roles

G Suite permissions

G Suite Assign groups

G Suite Assign products and SKUs

Unix groups

Unix Assign groups

Cloud groups

Assign cloud groups

Subscribable reports

Assign subscribable reports

Assignment resources

Assign resource

Account definitions

assign account definition

Detailed information about this topic

Assigning products to shelves

There are different tasks available for assigning a single product from a shelf. The following example based on a resource shows you how to assign individual products.

To assign a resource to the Identity Lifecycle shelf as a product

  1. In the Manager, select the IT Shop | IT Shop | Identity & Access Lifecycle | Shelf: Identity Lifecycle category.

  2. Select the Assign resources task.

  3. In the Add assignments pane, assign resources.

  4. Save the changes.

Products are automatically assigned to shelves at the same time, if:

  • Groups are automatically added to the IT Shop

  • Rule templates are used to set up the IT Shop

Use the DBQueue Processor inheritance mechanism and subsequent post-processing to create a separate product node for each assigned product within the shelf. These product nodes are displayed with the name of the product’s service item. If products are added in bulk to the IT Shop by automatic processes, you can specify how many product nodes are created in one DBQueue Processor run in the QER | ITShop | LimitOfNodeCheck configuration parameter. Once this number has been exceeded, the task is closed and queued again in the DBQueue for generating the rest of the product nodes. By default, 500 objects are processed in one run.

Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级