The criteria for identity assignments are defined for the site collection. You specify which user account properties must match the identity’s properties such that the identity can be assigned to the user account. You can limit search criteria further by using format definitions.
The search criterion is written in XML notation to the Search criteria for automatic identity assignment column (AccountToPersonMatchingRule) in the O3SSite table.
Search criteria are evaluated when identities are automatically assigned to user accounts. Furthermore, you can create a suggestion list for assignments of identities to user accounts based on the search criteria and make the assignment directly.
NOTE: Object definitions for user accounts that can have search criteria applied to them are predefined. For example, if you require other objects definitions that limit a preselection of user accounts, set up the respective custom object definitions in the Designer. For more information, see the One Identity Manager Configuration Guide.
To specify criteria for identity assignment
-
In the Manager, select the SharePoint Online > Site collections category.
-
Select the site collection in the result list.
-
Select the Define search criteria for identity assignment task.
-
Specify which user account properties must match with which identity so that the identity is linked to the user account.
Table 10: Search criteria for user accounts
|
SharePoint Online user account (user authenticated) |
Default email address (DefaultEmailAddress) |
Email address (EMail) |
- Save the changes.
For more information about defining search criteria, see the One Identity Manager Target System Base Module Administration Guide.
Related topics
The default manage level is applied if you create user accounts using automatic identity assignment. You can change a user account manage level later.
To change the manage level for a user account
-
In the Manager, select the SharePoint Online > User accounts (user authenticated) category.
-
Select the user account in the result list.
-
Select the Change main data task.
-
Select the manage level in the Manage level list on the General tab.
- Save the changes.
An account definition can be subsequently assigned to user accounts with Linked status. This may be necessary, for example, if:
-
Identities and user accounts have been linked manually.
-
Automatic identity assignment is configured, but when a user account is inserted, no account definition is assigned in the SharePoint Online system.
To manage user accounts through account definitions
-
Create an account definition.
-
Assign an account definition to the site collection.
-
Assign a user account in the Linked state to the account definition. The account definition's default manage level is applied to the user account.
-
In the Manager, select the SharePoint Online > User accounts (user authenticated) > Linked but not configured > <site collection> category.
-
Select the Assign account definition to linked accounts task.
-
In the Account definition menu, select the account definition.
-
Select the user accounts that contain the account definition.
-
Save the changes.
Detailed information about this topic
An identity can be linked to multiple SharePoint Online user accounts, for example, so that you can assign an administrative user account in addition to the default user account. One identity can also use default user accounts with different types.
To manually assign user accounts to an identity
-
In the Manager, select the Identities > Identities category.
-
Select the identity in the result list and run the Assign SharePoint Online user accounts task.
-
Assign the user accounts.
- Save the changes.
Related topics
