The criteria for employee assignments are defined for the site collection. You specify which user account properties must match the employee’s properties such that the employee can be assigned to the user account. You can limit search criteria further by using format definitions.
The search criterion is written in XML notation to the Search criteria for automatic employee assignment column (AccountToPersonMatchingRule) in the O3SSite table.
Search criteria are evaluated when employees are automatically assigned to user accounts. Furthermore, you can create a suggestion list for assignments of employees to user accounts based on the search criteria and make the assignment directly.
NOTE: Object definitions for user accounts that can have search criteria applied to them are predefined. For example, if you require other objects definitions that limit a preselection of user accounts, set up the respective custom object definitions in the Designer. For more information, see the One Identity Manager Configuration Guide.
To specify criteria for employee assignment
-
In the Manager, select the SharePoint Online > Site collections category.
-
Select the site collection in the result list.
-
Select the Define search criteria for employee assignment task.
-
Specify which user account properties must match with which employee so that the employee is linked to the user account.
Table 10: Search criteria for user accounts
|
SharePoint Online user account (user authenticated) |
Default email address (DefaultEmailAddress) |
Email address (EMail) |
- Save the changes.
For more information about defining search criteria, see the One Identity Manager Target System Base Module Administration Guide.
Related topics
The default manage level is applied if you create user accounts using automatic employee assignment. You can change a user account manage level later.
To change the manage level for a user account
-
In the Manager, select the SharePoint Online > User accounts (user authenticated) category.
-
Select the user account in the result list.
-
Select the Change main data task.
-
Select the manage level in the Manage level list on the General tab.
- Save the changes.
An account definition can be subsequently assigned to user accounts with Linked status. This may be necessary, for example, if:
-
Employees and user accounts were linked manually
-
Automatic employee assignment is configured, but when a user account is inserted, no account definition is assigned in the SharePoint Online system.
To manage user accounts through account definitions
-
Create an account definition.
-
Assign an account definition to the site collection.
-
Assign a user account in the Linked state to the account definition. The account definition's default manage level is applied to the user account.
-
In the Manager, select the SharePoint Online > User accounts (user authenticated) > Linked but not configured > <site collection> category.
-
Select the Assign account definition to linked accounts task.
-
In the Account definition menu, select the account definition.
-
Select the user accounts that contain the account definition.
-
Save the changes.
Detailed information about this topic
An employee can be linked to multiple SharePoint Online user accounts, for example, so that you can assign an administrative user account in addition to the default user account. One employee can also use default user accounts with different types.
NOTE: To enable working with identities for user accounts, the employees also need identities. You can only link user accounts to which an identity is assigned with employees who have this same identity.
To manually assign user accounts to an employee
-
In the Manager, select the Employees > Employees category.
-
Select the employee in the result list and run the Assign SharePoint Online user accounts task.
-
Assign the user accounts.
- Save the changes.
Related topics
