立即与支持人员聊天
与支持团队交流

Identity Manager 8.1.4 - IT Shop Administration Guide

Setting up an IT Shop solution
One Identity Manager users in the IT Shop Implementing the IT Shop Requestable products Preparing products for requesting Assigning and removing products Preparing the IT Shop for multi-factor authentication Assignment requests and delegating Creating IT Shop requests from existing user accounts, assignments, and role memberships Adding Active Directory and SharePoint groups to the IT Shop automatically Adding Privileged Account Management user groups to the IT Shop automatically
Approval processes for IT Shop requests
Approval policies for requests Approval workflows for requests Determining the effective approval policies Selecting responsible approvers Request risk analysis Testing requests for rule compliance Approving requests from an approver Automatically approving requests Approval by peer group analysis Gathering further information about a request Appointing other approvers Escalating an approval step Approvers cannot be established Automatic approval on timeout Cancel request on timeout Approval by the chief approval team Approving requests with terms of use Using default approval processes
Request sequence Managing an IT Shop
IT Shop base data Setting up IT Shop structures Setting up a customer node Deleting IT Shop structures Templates for automatically filling the IT Shop Custom mail templates for notifications Request templates
Resolving errors in the IT Shop Configuration parameters for the IT Shop Request statuses Examples of request results

Self-service

Use the SB (self-service) approval procedure to approve requests automatically. You do not have to specify approvers for this approval procedure. A self-service request is always granted immediate approval. Always define an approval workflow with the approval procedure SB as a one-step workflow. That means you cannot set up more approval steps in addition to a self-service approval step.

The approval workflow and the Self-service approval policy are available by default and assigned to the Identity & Access Lifecycle shop.

Using IT Shop structures to find approvers

Use the following approval procedures to establish an IT Shop structure owner, an IT Shop structure department manager or an IT Shop structure cost center manager as approver.

Table 30: Approval procedures for determining approvers for IT Shop structures

Approval procedure

Approver

The IT Shop structure from which the request comes is assigned an owner or a deputy.

H0

H1

H2

Owner and deputy of the shelf

Owner and deputy of the shop

Owner and deputy of the shopping center

A department is assigned to the IT Shop structure from which the request is made.

The department is assigned a manager or a deputy manager.

D0

D1

D2

Manager and deputy manager of the department's shelf

Manager and deputy manager of the department's shop

Manager and deputy manager of the department's shopping center

A cost center is assigned to the IT Shop structure from which the request is made.

The cost center is assigned a manager or a deputy manager.

P0

P1

P2

Manager and deputy manager of the cost center's shelf

Manager and deputy manager of the cost center's shop

Manager and deputy manager of the cost center's shopping center

Using request recipients to find approvers

Use the following approval procedure if you want to determine the manager of the request recipient to be approver.

Table 31: Approval procedures for determining approvers for request recipients

Approval procedure

Approver

The request recipient is assigned a manager.

CM

Request recipient's manager

The request recipient is assigned to a department.

The department is assigned a manager or a deputy manager.

DM

Manager and deputy manager of the request recipient's department.

The request recipient is assigned a cost center.

The cost center is assigned a manager or a deputy manager.

PM

Manager and deputy manager of the request recipient's cost center.

Using specific roles to find approvers

If members of a specific role are to be determined as approvers, use the OR or OM approval procedure. In the approval step, also specify the role to be used to find the approver. The approval procedures determine the following approvers. If a deputy IT Shop has been entered in the master data for these employees, they are also authorized as approver.

Table 32: Approval procedures for determining approvers for a specific role

Selectable roles

Approver

OM

Departments (Department)

Cost centers (ProfitCenter)

Locations (Locality)

Business roles (Org)

Manager and deputy manager of the hierarchical role specified in the approval step.

OR

Departments (Department)

Cost centers (ProfitCenter)

Locations (Locality)

Business roles (Org)

Application roles (AERole)

All secondary members of the hierarchical role specified in the approval step.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级