立即与支持人员聊天
与支持团队交流

Identity Manager 9.0 LTS - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Dynamic roles Departments, cost centers, and locations
One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations Creating and editing departments Creating and editing cost centers Creating and editing locations Setting up IT operating data for departments, cost centers, and locations Assigning employees, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded employees Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Reports about departments, cost centers, and locations
Employee administration
One Identity Manager users for employee administration Basic data for employee main data Employee's central user account Employee's default email address Employee's central password Mapping multiple employee identities Password policies for employees Creating and editing employees Disabling and deleting employees Deleting all employee related data Limited access to One Identity Manager Changing the certification status of employees Assigning company resources to employees Displaying the origin of employees' roles and entitlements Analyzing role memberships and employee assignments Displaying the employees overview Displaying and deleting employees' Webauthn security keys Determining the language for employees Determining employees working hours Manually assigning user accounts to employees Entering calls for employees Assigning extended properties to employees Employee reports
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing employees Configuration parameters for managing devices and workdesks

Adding resources in system roles

NOTE: This function is only available if the System Roles Module is installed.

A resource can be added to different system roles. A system role that only contains resources can be labeled with the Resource package system role type. Resources can also be added to system roles that are not resource packages. When you assign a system role to an employee the resource is assigned to the employee.

For more information about working with system roles, see the One Identity Manager System Roles Administration Guide.

NOTE: Resources with the Only use in IT Shop option set can only be assigned to system roles that also have this option set.

To assign a resource to system roles

  1. In the Manager, select the Entitlements > Resources category.

  2. Select a resource in the result list.

  3. Select the Assign system roles task.

  4. In the Add assignments pane, assign system roles.

    TIP: In the Remove assignments pane, you can remove the system role assignment.

    To remove an assignment

    • Select the system role and double-click .

  5. Save the changes.

Displaying the resources overview

Use this task to obtain an overview of the most important information about a resource. The affiliation of the resource to hierarchical roles and IT Shop structures counts in this here.

To obtain an overview of a resource

  1. In the Manager, select the Entitlements > Resources category.

  2. Select a resource in the result list.

  3. Select the Resource overview task.

Assigning extended properties to resources

Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.

To specify extended properties for an resource

  1. In the Manager, select the Entitlements > Resources category.

  2. Select a resource in the result list.

  3. Select Assign extended properties.

  4. In the Add assignments pane, assign extended properties.

    TIP: In the Remove assignments pane, you can remove assigned extended properties.

    To remove an assignment

    • Select the extended property and double-click .

  5. Save the changes.
Detailed information about this topic

Creating and editing multi-request resources

You can only edit multi-request resources if the QER | ITShop configuration parameter is set.

  • In the Designer, check if the configuration parameter is set. Otherwise, set the configuration parameter and compile the database.

To create or edit multi-request resources

  1. In the Manager, select the Entitlements > Multi-request resources for IT Shop category.

  2. Select a resource in the result list and run the Change main data task.

    - OR -

    Click in the result list.

  3. Edit the multi-request resource's main data.

  4. Save the changes.

To create or edit multi requestable/unsubscribable resources

  1. In the Manager, select the Entitlements > Multi requestable/unsubscribable resources for IT Shop category.

  2. Select a resource in the result list and run the Change main data task.

    - OR -

    Click in the result list.

  3. Edit the multi requestable/unsubscribable resource's main data.

  4. Save the changes.
Detailed information about this topic
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级