立即与支持人员聊天

获得即时帮助
完成注册

登录

请求定价

联系销售人员

Identity Manager 8.1.5 - Administration Guide for Connecting to SharePoint

Managing SharePoint environments

Architecture overview One Identity Manager users for managing SharePoint Claims-based authentication

Setting up SharePoint farm synchronization

Users and permissions for synchronizing with a SharePoint farm Setting up the synchronization server Creating a synchronization project for initial synchronization of a SharePoint farm Special synchronization cases for valid permissions Displaying synchronization results Customizing the synchronization configuration

How to configure SharePoint synchronization Configuring synchronization of several SharePoint farms Updating schemas

Speeding up synchronization with revision filtering Post-processing outstanding objects Configuring the provisioning of memberships Accelerating provisioning and single object synchronization Help for the analysis of synchronization issues Disabling synchronization

Basic data for managing a SharePoint environment

Authentication modes Prefixes Zones and alternative URLs SharePoint site templates SharePoint permissions SharePoint quotas SharePoint languages Editing a server

Master data for a Job server Specifying server functions

Target system managers Setting up account definitions

Creating an account definition

Master data for an account definition

Creating manage levels

Master data for manage levels

Creating a formatting rule for IT operating data Collecting IT operating data Modify IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning an account definition to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions to the IT Shop

Assigning account definitions to a target system Deleting an account definition

SharePoint farms

General master data for a SharePoint farm How to edit a synchronization project

SharePoint web applications SharePoint site collections and sites

SharePoint site collections

General master data for a site collection Specifying categories for inheriting SharePoint groups

SharePoint sites

General master data for a site Address data for a site Site design properties Additional tasks for managing sites Passing on permissions to child sites

Setting up SharePoint site collections and sites

SharePoint user accounts

Supported user account types Entering master data for SharePoint user accounts

Group authenticated user account master data User authenticated user account master data

Additional tasks for managing SharePoint user accounts

Displaying the SharePoint user account overview Assigning SharePoint groups directly to a SharePoint user account Assigning SharePoint roles directly to user accounts Assigning extended properties

Using custom authentication modes Automatic assignment of employees to SharePoint user accounts

Editing search criteria for automatic employee assignment

Deleting and restoring SharePoint user accounts

SharePoint roles and groups

SharePoint groups

Entering master data for SharePoint groups Assigning SharePoint groups to SharePoint user accounts

Assigning SharePoint groups to departments, cost centers and locations Assigning SharePoint groups to business roles Assigning SharePoint user accounts directly to a SharePoint group Assigning SharePoint roles to SharePoint groups Adding SharePoint groups to system roles Adding SharePoint groups to the IT Shop Adding SharePoint groups automatically to the IT Shop

Additional tasks for managing SharePoint groups

Displaying an overview of SharePoint groups Effectiveness of group memberships SharePoint group inheritance based on categories Assigning extended properties to SharePoint groups

Deleting SharePoint groups Default solutions for requesting SharePoint groups

Adding SharePoint groups SharePointRequesting Groups Memberships

SharePoint roles and permission levels

Entering master data for SharePoint permission levels Additional tasks for managing SharePoint permission levels

Displaying the SharePoint permission level overview Assigning permissions

Special synchronization cases for valid permissions Entering master data for SharePoint roles Assigning SharePoint roles to SharePoint user accounts

Assigning SharePoint roles to departments, cost centers and locations Assigning SharePoint roles to business roles Assigning SharePoint user accounts directly to a SharePoint role Assigning SharePoint groups to SharePoint roles Adding SharePoint roles to system roles Adding SharePoint roles to the IT Shop

Additional tasks for managing SharePoint roles

Displaying the SharePoint rules overview Effectiveness of SharePoint roles

Deleting SharePoint roles and permission levels

Permissions for SharePoint web applications

SharePoint permission policies SharePoint user policies

Reports about SharePoint site collections

Overview of all assignments

Configuration parameters for managing a SharePoint environment Default project template for SharePoint

Additional tasks for managing SharePoint permission levels

After you have entered the master data, you can run the following tasks.

Displaying the SharePoint permission level overview

Assigning permissions

Displaying the SharePoint permission level overview

To obtain an overview of a permission level

Select the SharePoint | Permission levels category.
Select the permission level in the result list.
Select the SharePoint permission level overview task.

Assigning permissions

You can assign One Identity Manager permission levels in SharePoint. Only valid permissions for web applications can be assigned. User account obtain these site permissions through a SharePoint internal inheritance procedure.

Permissions may depend on other permissions. SharePoint assigns these dependent permissions automatically. For example, the permissions "view pages", "browse user information", and "open" are always passed down with the permission "create groups".

NOTE: Dependent permissions cannot be automatically assigned in the One Identity Manager.

To assign permissions to permission levels

Select the SharePoint | Permission levels category.
Select the permission level in the result list.
Select the Assign permission task.
In the Add assignments pane, assign permission.
- OR -

In the Remove assignments pane, remove permission.
Save the changes.

Related topics

SharePoint roles and groups

Special synchronization cases for valid permissions

If you remove permissions from the list of valid permissions for a web application in SharePoint, the permissions cannot be assigned to permission levels within the web application from this point on. Assignments to permission levels that already exist for these permissions remain intact but are not active. These permissions are deleted from the SPSWebAppHasPermission table during synchronization. Assignments to permission levels that already exist for these permissions are not changed. Inactive permissions are displayed in the permission levels' overview.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© 2025 One Identity LLC. ALL RIGHTS RESERVED. 使用条款隐私 Cookie Preference Center