Adding system roles to system roles
Use this task to group different system roles into one package. This enables system roles to be structured from different view points.
NOTE: System roles with the Only use in IT Shop option set can only be assigned to system roles that also have this option set.
To assign a system role to system roles
-
In the Manager, select the Entitlements > System roles category.
-
Select the system role in the result list.
-
Select the Assign system roles task.
-
To assign parent system roles, select the System Role contained in tab.
-
To assign child system roles, select the System Role contains tab.
- Save the changes.
Assigning system roles
By assigning system roles to other system roles, the system roles become structured hierarchically. A system role can be a child and a parent to any other system role.
In the inheritance calculation, child system roles are not treated as assigned company resources. The assignment of system roles to system roles is only used to build a hierarchy.
To structure system roles hierarchically
-
In the Manager, select the Entitlements > System roles category.
-
Select the system role in the result list.
-
Select the Assign system roles task.
-
Select the System role contains tab.
-
In the Add assignments pane, assign the system roles that you want to be children to the selected system role.
TIP: In the Remove assignments pane, you can remove assigned system roles.
To remove an assignment
-
Select the System role contained in tab.
-
In the Add assignments pane, assign the system roles that you want to be parents to the selected system role.
TIP: In the Remove assignments pane, you can remove the system role assignment.
To remove an assignment
- Save the changes.
Related topics
Excluding system roles
Specify, which system role of a pair of system roles, should be take effect if both are assigned. No company resources are inherited by the system role which is not effective.
To exclude system roles
-
In the Manager, select the Entitlements > System roles category.
-
Select the system role in the result list.
-
Select the Edit conflicting system roles task.
-
In the Add assignments pane, assign system roles that are mutually exclusive to the selected system role.
TIP: In the Remove assignments pane, you can remove the system role assignment.
To remove an assignment
- Save the changes.
Detailed information about this topic
Assigning extended properties to system roles
Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.
To specify extended properties for a system role
-
In the Manager, select the Entitlements > System roles category.
-
Select the system role in the result list.
-
Select the Assign extended properties task.
-
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.
To remove an assignment
- Save the changes.
For more information about extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.
.