立即与支持人员聊天
与支持团队交流

Identity Manager 9.0 LTS - Web Portal User Guide

General tips and getting started Requests
Setting up and configuring request functions Requesting products Saved for Later list Managing my request templates Pending requests Displaying request history Canceling requests Renewing products with limit validity periods Unsubscribing products Displaying approvals Undoing approvals
Attestation Compliance Responsibilities
My responsibilities
Managing my departments Managing my application roles Managing my business roles Managing my identities Managing my cost centers Managing my locations Managing my system entitlements Managing my system roles
Delegating tasks Ownerships
Managing data
Managing identities Managing user accounts Managing system entitlements Managing departments Managing locations Managing cost centers Managing business roles Managing system roles
Appendix: Attestation conditions and approval policies from attestation procedures

Analyzing assignments to my application roles

You can see how an application role assignment under your responsibility came about by displaying an assignment analysis for the corresponding membership.

To display the assignment analysis for a membership

  1. Open the home page.

  2. On the Home page, in the My Responsibilities tile, click Application roles.

  3. On the Application Roles page, next to the application role whose memberships you want to display, click Edit.

  4. In the Edit Application role pane, click the Memberships tab.

  5. On the Memberships tab, click Secondary memberships.

  6. Next to the corresponding membership, select the check box.

  7. Click View assignment analysis.

Assigning identities to my application roles

You can assign identities to application roles for which you are responsible.

The following assignment options are available:

To assign an identity to a application role using a request

  1. Open the home page.

  2. On the Home page, in the My Responsibilities tile, click Application roles.

  3. On the Application Roles page, next to the application role you want to add an identity to, click Edit.

  4. In the Edit Application Role pane, click the Memberships tab.

  5. On the Memberships tab, click Request memberships.

  6. In the Select Identities pane, select the check box next to the identity you want to assign to the application role.

  7. Click Request memberships.

  8. Close the Edit Application Role pane.

  9. In the menu bar, click Requests > Shopping cart.

  10. On the Shopping Cart page, click Submit.

    Once the request has been granted approval, the identity is assigned to the application role.

To add members automatically through a dynamic role

  1. Open the home page.

  2. On the Home page, in the My Responsibilities tile, click Application roles.

  3. On the Application Roles page, next to the application role for which you want to create a dynamic role, click Edit.

  4. In the Edit Application Role pane, click the Memberships tab.

  5. On the Memberships tab, click Automatic memberships.

  6. Click Create dynamic role.

  7. Use conditions to specify which identities to add over the dynamic role. Perform the following actions to do this:

    1. In the Property menu, select the relevant property.

    2. In the Operator menu, select a logical operator.

    3. In the final field, specify a comparison value.

    4. (Optional) To add another condition, click Add another condition and repeat the steps.

    5. (Optional) To change the way the conditions are linked, you can toggle between And and Or by clicking the link.

    TIP: To remove a condition, click (Delete).

    For more information about customizing filter conditions, see Custom filter conditions.

  8. Click Save.

  9. (Optional) In the Calculation schedule menu, select the schedule that specifies when memberships are calculated.

  10. (Optional) To calculate memberships immediately after a relevant object is changed, select the Assignments recalculated immediately check box.

  11. Click Save.

TIP: A membership that was created through a dynamic role is labeled as Assigned by dynamic role in the memberships list.

To re-add an excluded member

  1. Open the home page.

  2. On the Home page, in the My Responsibilities tile, click Application roles.

  3. On the Application Roles page, next to the application role you want to add again, click Edit.

  4. In the Edit Application Role pane, click the Memberships tab.

  5. On the Memberships tab, click Excluded members.

  6. Select the check box next to the identity you want to add again as a member.

  7. Click Remove exclusion.

Related topics

Removing identities from my application roles

You can remove application roles from identities, for which you are responsible, by deleting or unsubscribing the relevant memberships.

To remove an application role from an identity

  1. Open the home page.

  2. On the Home page, in the My Responsibilities tile, click Application roles.

  3. On the Application Roles page, next to the application role with a membership you want to delete, click Edit.

  4. In the Edit Application Role pane, click the Memberships tab.

  5. On the Memberships tab, click Secondary Memberships.

  6. Select the check box next to the membership you want to delete.

  7. Click Remove.

  8. In the Remove Memberships pane, click Remove memberships.

  9. If the member was assigned through a dynamic role, perform the following actions:

    1. (Optional) In the Specify Reason for Exclusion dialog, specify why you want to remove the member.

    2. Click Exclude members.

Displaying my application roles' rule violations

You can see the rule violations of application roles for which you are responsible.

To display rule violations

  1. Open the home page.

  2. On the Home page, in the My Responsibilities tile, click Application roles.

  3. On the Application Roles page, next to the application role whose rule violations you want to display, click Edit.

  4. On the Edit Application Role pane, click the Rule Violations tab.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级