立即与支持人员聊天
与支持团队交流

Identity Manager 9.2.1 - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Dynamic roles Departments, cost centers, and locations
One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations Creating and editing departments Creating and editing cost centers Creating and editing locations Setting up IT operating data for departments, cost centers, and locations Assigning identities, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded identities Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Certifying departments, cost centers, and locations Reports about departments, cost centers, and locations
Identity administration
One Identity Manager users for managing identities Basics for managing identities Creating and editing identities Assigning company resources to identities Displaying the origin of identities' roles and entitlements Analyzing role memberships and identity assignments Deactivating and deleting identities Deleting all personal data Limited access to One Identity Manager Changing the certification status of identities Displaying the identities overview Displaying and deleting identities' Webauthn security keys Determining the language for identities Determining identities working hours Manually assigning user accounts to identities Entering tickets for identities Assigning extended properties to identities Reports about identities Basic configuration data for identities
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing identities Configuration parameters for managing devices and workdesks

Assigning identities to business roles

NOTE: This function is only available if the Business Roles Module is installed.

Assign identities to business roles so that identities obtain their company resources through these business roles. To assign company resources to business roles use the corresponding business role tasks. For more information about working with business roles, see the One Identity Manager Business Roles Administration Guide.

To assign an identity to business roles (secondary assignment; default method)

  1. In the Manager, select the Identities > Identities category.

  2. Select the identity in the result list.

  3. Select the Assign business roles task.

  4. In the Add assignments pane, select the role class and assign business roles.

    TIP: In the Remove assignments pane, you can remove assigned business roles.

    To remove an assignment

    • Select the business role and double-click .

  5. Save the changes.

To assign an identity to business roles (primary assignment)

  1. In the Manager, select the Identities > Identities category.

  2. Select the identity in the result list.

  3. Select the Change main data task.

  4. On the Organizational tab, enter the primary business role.

  5. Save the changes.

Related topics

Adding identities to IT Shop custom nodes

When identities are added to a custom node they are entitled to make IT Shop requests. Access permissions to the IT Shop and the assignments allocated to them through product requests in the IT Shop are displayed on the identity’s overview. For more information, see the One Identity Manager IT Shop Administration Guide.

To add an identity to the IT Shop

  1. In the Manager, select the Identities > Identities category.

  2. Select the identity in the result list.

  3. Select the Assign IT Shop memberships task.

  4. In the Add assignments pane, assign custom nodes.

    - OR -

    In the Remove assignments pane, remove the custom nodes.

  5. Save the changes.

Assigning application roles to identities

For more information about implementing and editing application roles, see the One Identity Manager Authorization and Authentication Guide.

Assigned identities obtain all the permissions of the permission group to which the application role (or a parent application role) is assigned. In addition, identities obtain the company resources assigned to the application role.

If there are no identities directly assigned to an application role, the identities of the parent application role inherit the permissions.

NOTE: The application roles for Base roles | Everyone (Change), Base roles | Everyone (Lookup), Base roles | Identity Managers, and Base roles | Birthright Assignments are automatically assigned to identities. Do not make any manually assignments to these application roles.

To assign application to an identity

  1. In the Manager, select the Identities > Identities category.

  2. Select the identity in the result list.

  3. Select the Assign One Identity Manager application roles task.

  4. In the Add assignments pane, assign the application roles.

    TIP: In the Remove assignments pane, you can remove application role assignments.

    To remove an assignment

    • Select the application role and double-click .

  5. Save the changes.

Assigning resources directly to identities

Resources can be assigned directly or indirectly to identities. Indirect assignment is carried out by allocating identities and resources in company structures, like departments, cost centers, locations, or business roles.

To react quickly to special requests, you can assign resources directly to an identity.

To assign resources directly to an identity

  1. In the Manager, select the Identities > Identities category.

  2. Select the identity to whom the resources will be assigned, from the result list.

  3. Select the Assign resources task.

  4. In the Add assignments pane, assign resources.

    TIP: In Remove assignments, you can remove assigned resources.

    To remove an assignment

    • Select the resource and double-click .
  5. Save the changes.
Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级