Editing main data of disabled Azure Active Directory service plans
To edit disabled Azure Active Directory service plan main data
-
In the Manager, select the Azure Active Directory > Disabled service plans category.
-
Select the disabled service plan from the result list.
-
Select the Change main data task.
-
Edit the disabled service plan's main data.
-
Save the changes.
Table 38: Disabled service plan main data
Subscription |
Name of the Azure Active Directory subscription. |
Service plan |
Name of the Azure Active Directory service plan. |
IT Shop |
Specifies whether the service plan can be requested through the IT Shop. The disabled service plan can be requested by your staff though the Web Portal and granted through a defined approval process. The disabled service plan can still be assigned directly to hierarchical roles. |
Only for use in IT Shop |
Specifies whether the disabled service plan can only be requested through the IT Shop. The disabled service plan can be requested by your staff though the Web Portal and granted through a defined approval process. The disabled service plan may not be assigned directly to hierarchical roles. |
Service item |
Service item data for requesting the disabled service plan through the IT Shop. |
Category |
Categories for disabled service plan inheritance. User accounts can selectively inherit disabled Azure Active Directory service plans. To do this, disabled service plans and Azure Active Directory user accounts are divided into categories. Use this menu to allocate one or more categories to the disabled service plan. |
Related topics
Assigning extended properties to disabled Azure Active Directory service plans
Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.
For more information about using extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.
To specify extended properties for a disabled Azure Active Directory service plan
-
In the Manager, select the Azure Active Directory > Disabled service plans category.
-
Select the disabled service plan from the result list.
-
Select Assign extended properties.
-
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.
To remove an assignment
- Save the changes.
Displaying the disabled Azure Active Directory service plan overview
Use this task to obtain an overview of the most important information about a disabled Azure Active Directory service plan.
To obtain an overview of a disabled Azure Active Directory service plan
-
In the Manager, select the Azure Active Directory > Disabled service plans category.
-
Select the disabled service plan from the result list.
-
Select the Disabled Azure Active Directory service plan overview task.
Related topics
Azure Active Directory app registrations and Azure Active Directory service principals
When an application is registered in an Azure Active Directory tenant, it creates an associated Azure Active Directory service principal. There are so-called app roles defined for app registrations. Azure Active Directory users, Azure Active Directory groups, or Azure Active Directory service principals can use app roles to provide permissions or functions for the application.
For more information about integrating applications in Azure Active Directory, see the Azure Active Directory documentation from Microsoft.
Information about Azure Active Directory app registrations, Azure Active Directory service principals, and app roles within an Azure Active Directory tenant is loaded into One Identity Manager during synchronization.
If an Azure Active Directory application is used in an Azure Active Directory tenant that is registered in another Azure Active Directory tenant, only the Azure Active Directory service principal and not the Azure Active Directory app registration is loaded into One Identity Manager.
You cannot create new Azure Active Directory app registrations, Azure Active Directory service principals, and app roles in One Identity Manager but you can specify owners of app registrations and service principals and create or delete app roles in One Identity Manager.
Detailed information about this topic