立即与支持人员聊天
与支持团队交流

Identity Manager 8.1.4 - IT Shop Administration Guide

Setting up an IT Shop solution
One Identity Manager users in the IT Shop Implementing the IT Shop Requestable products Preparing products for requesting Assigning and removing products Preparing the IT Shop for multi-factor authentication Assignment requests and delegating Creating IT Shop requests from existing user accounts, assignments, and role memberships Adding Active Directory and SharePoint groups to the IT Shop automatically Adding Privileged Account Management user groups to the IT Shop automatically
Approval processes for IT Shop requests
Approval policies for requests Approval workflows for requests Determining the effective approval policies Selecting responsible approvers Request risk analysis Testing requests for rule compliance Approving requests from an approver Automatically approving requests Approval by peer group analysis Gathering further information about a request Appointing other approvers Escalating an approval step Approvers cannot be established Automatic approval on timeout Cancel request on timeout Approval by the chief approval team Approving requests with terms of use Using default approval processes
Request sequence Managing an IT Shop
IT Shop base data Setting up IT Shop structures Setting up a customer node Deleting IT Shop structures Templates for automatically filling the IT Shop Custom mail templates for notifications Request templates
Resolving errors in the IT Shop Configuration parameters for the IT Shop Request statuses Examples of request results

Specifying product dependencies

You can define dependencies for products. For example, when a printer is requested, a flat-rate installation charge has to be requested at the same time, and toner may be requested optionally. You can also specify if two products should never be requested simultaneously.

Dependencies between requestable products are created using service items.

When a product is requested, it is tested for dependencies and in this case, dependent products are added to the request.

To specify dependencies between products

  1. In the Manager, select the IT Shop | Service catalog | Hierarchical by service categories | <service category> category.

    - OR -

    In the Manager, select the IT Shop | Service catalog | Hierarchical by service categories | Singles category.

  2. Select the product's service item in the result list.

  3. Select the Edit product dependencies for requests task.

    • In the Dependent products tab, specify the dependent products.

      In the Add assignments pane, assign the service items.

    • In the Depends on products tab, specify which selected service item is dependent on which products.

      In the Add assignments pane, assign the service items.

  4. Save the changes.

  5. Select the Service item overview task.

  6. Define the properties of the product dependency.

    1. On the Dependent products or Depends on products form element, select the dependent product.

      This opens the product dependency master details form.

    2. Specify the dependency conditions. Select one of the following options:

      • Cannot request products together

        This option prevents the dependent product from being acquired by the same request. The product can be assigned at any time with a separate, direct request.

      • Product must be requested at the same time

      • Product can optionally be requested with another

  7. Save the changes.

Reports about service items

One Identity Manager makes various reports available containing information about the selected base object and its relations to other One Identity Manager database objects. The following reports are available for service items.

NOTE: Other sections may be available depending on the which modules are installed.
Table 6: Reports about service items
Report Description
Overview of all assignments

This report finds all roles containing employees with the selected service item.

Related topics

Overview of all assignments

The Overview of all assignments report is displayed for some objects, such as authorizations, compliance rules, or roles. The report finds all the roles, for example, departments, cost centers, locations, business roles, and IT Shop structures in which there are employees who own the selected base object. In this case, direct as well as indirect base object assignments are included.

Examples
  • If the report is created for a resource, all roles are determined in which there are employees with this resource.
  • If the report is created for a group or another system entitlement, all roles are determined in which there are employees with this group or system entitlement.
  • If the report is created for a compliance rule, all roles are determined in which there are employees who violate this compliance rule.
  • If the report is created for a department, all roles are determined in which employees of the selected department are also members.
  • If the report is created for a business role, all roles are determined in which employees of the selected business role are also members.

To display detailed information about assignments

  • To display the report, select the base object from the navigation or the result list and select the Overview of all assignments report.
  • Click the Used by button in the report toolbar to select the role class for which you want to determine whether roles exist that contain employees with the selected base object.

    All the roles of the selected role class are shown. The color coding of elements identifies the role in which there are employees with the selected base object. The meaning of the report control elements is explained in a separate legend. To access the legend, click the icon in the report's toolbar.

  • Double-click a control to show all child roles belonging to the selected role.
  • By clicking the button in a role's control, you display all employees in the role with the base object.
  • Use the small arrow next to to start a wizard that allows you to bookmark this list of employees for tracking. This creates a new business role to which the employees are assigned.

Figure 3: Toolbar of the Overview of all assignments report.

Table 7: Meaning of icons in the report toolbar

Icon

Meaning

Show the legend with the meaning of the report control elements

Saves the current report view as a graphic.

Selects the role class used to generate the report.

Displays all roles or only the affected roles.

Entering service categories

You can group individual service items into service categories to create a service catalog.

To edit service categories

  1. In the Manager, select the IT Shop | Basic configuration data | Service categories category.

    - OR -

    In the Manager, select the IT Shop | Service catalog category.

  2. In the result list, select the service category and run the Change master data task.

  3. Edit the service category's master data.

  4. Save the changes.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级