立即与支持人员聊天

获得即时帮助
完成注册

登录

请求定价

联系销售人员

Identity Manager 9.2 - Administration Guide for Connecting to SharePoint

Managing SharePoint environments

Architecture overview One Identity Manager users for managing SharePoint Claims-based authentication

Setting up SharePoint farm synchronization

Users and permissions for synchronizing with a SharePoint farm Setting up the synchronization server Creating a synchronization project for initial synchronization of a SharePoint farm Special synchronization cases for valid permissions Displaying synchronization results Customizing the synchronization configuration

How to configure SharePoint synchronization Configuring synchronization of several SharePoint farms Changing system connection settings of SharePoint farms

Editing connection parameters in the variable set Editing target system connection properties

Updating schemas

Speeding up synchronization with revision filtering Post-processing outstanding objects Configuring the provisioning of memberships Configuring single object synchronization Accelerating provisioning and single object synchronization Help for analyzing synchronization issues Disabling synchronization Synchronizing single objects Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)

Basic data for managing a SharePoint environment

Authentication modes Prefixes Zones and alternative URLs SharePoint site templates SharePoint permissions SharePoint quotas SharePoint languages Editing a server

Main data for a Job server Specifying server functions

Target system managers Setting up account definitions

Creating an account definition

Main data for an account definition

Creating manage levels

Main data for manage levels

Creating a formatting rule for IT operating data Collecting IT operating data Modify IT operating data Assigning account definitions to identities

Assigning account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all identities Assigning account definitions directly to identities Assigning account definitions to system roles Adding account definitions to the IT Shop

Assigning account definitions to a target system Deleting an account definition

SharePoint farms

General main data of a SharePoint farm Editing synchronization projects

SharePoint web applications SharePoint site collections and sites

SharePoint site collections

General main data of a site collection Specifying categories for inheriting SharePoint groups

SharePoint sites

General main data of a site Address data for a site Site design properties Additional tasks for managing sites Passing on permissions to child sites

Setting up SharePoint site collections and sites

SharePoint user accounts

Supported user account types Entering main data of SharePoint user accounts

Group authenticated user account main data User authenticated user account main data

Additional tasks for managing SharePoint user accounts

Displaying the SharePoint user account overview Assigning SharePoint groups directly to a SharePoint user account Assigning SharePoint roles directly to user accounts Assigning extended properties

Using custom authentication modes Assigning identities automatically to SharePoint user accounts

Editing search criteria for automatic identity assignment

Deleting and restoring SharePoint user accounts

SharePoint roles and groups

SharePoint groups

Entering main data of SharePoint groups Assigning SharePoint groups to SharePoint user accounts

Assigning SharePoint groups to departments, cost centers and locations Assigning SharePoint groups to business roles Assigning SharePoint user accounts directly to a SharePoint group Assigning SharePoint roles to SharePoint groups Adding SharePoint groups to system roles Adding SharePoint groups to the IT Shop Adding SharePoint groups automatically to the IT Shop

Additional tasks for managing SharePoint groups

Displaying an overview of SharePoint groups Effectiveness of group memberships SharePoint group inheritance based on categories Assigning extended properties to SharePoint groups

Deleting SharePoint groups Default solutions for requesting SharePoint groups

Adding SharePoint groups SharePointRequesting Groups Memberships

SharePoint roles and permission levels

Entering main data of SharePoint permission levels Additional tasks for managing SharePoint permission levels

Displaying the SharePoint permission level overview Assigning permissions

Special synchronization cases for valid permissions Entering main data of SharePoint roles Assigning SharePoint roles to SharePoint user accounts

Assigning SharePoint roles to departments, cost centers and locations Assigning SharePoint roles to business roles Assigning SharePoint user accounts directly to a SharePoint role Assigning SharePoint groups to SharePoint roles Adding SharePoint roles to system roles Adding SharePoint roles to the IT Shop

Additional tasks for managing SharePoint roles

Displaying the SharePoint rules overview Effectiveness of SharePoint roles Assigning extended properties to SharePoint roles

Deleting SharePoint roles and permission levels

Permissions for SharePoint web applications

SharePoint permission policies SharePoint user policies

Reports about SharePoint objects

Overview of all assignments

Configuration parameters for managing a SharePoint environment Default project template for SharePoint

SharePoint farms

NOTE: The Synchronization Editor sets up the farms in the One Identity Manager database.

To edit the main data of a farm

Select the SharePoint > Farms category.
Select the farm in the result list. Select the Change main data task.
Edit the farm's main data.
Save the changes.

General main data of a SharePoint farm

Enter the following main data of a farm.

Table 13: General main data of a farm

Property

Description

Name

Name of the SharePoint instance port. A distinguished name for internal user is formed from this.

Domain

Name of the Active Directory or LDAP domain that is serves as security provider for SharePoint The user accounts and groups that are referenced are searched for in this domain.

Display name

The farm's display name.

Target system managers

Application role in which target system managers are specified for the farm. Target system managers only edit the objects from farms that are assigned to them. Each farm can have a different target system manager assigned to it.

Select the One Identity Manager application role whose members are responsible for administration of this farm. Use the button to add a new application role.

Synchronized by

Type of synchronization through which data is synchronized between the farm and One Identity Manager. As soon as objects for this farm are available in One Identity Manager, the type of synchronization can no longer be changed.

When you create a farm with the Synchronization Editor, One Identity Manager is used.

Table 14: Permitted values
Value	Synchronization by	Provisioned by
One Identity Manager	SharePoint connector	SharePoint connector
No synchronization	none	none

NOTE: If you select No synchronization, you can define custom processes to exchange data between One Identity Manager and the target system.

Build version

The build version for SharePoint services for this farm are read in during synchronization.

Related topics

Target system managers

Editing synchronization projects

Synchronization projects in which a farm is already used as a base object can also be opened in the Manager. You can, for example, check the configuration or view the synchronization log in this mode. The Synchronization Editor is not started with its full functionality. You cannot run certain functions, such as, running synchronization or simulation, starting the target system browser and others.

NOTE: The Manager is locked for editing throughout. To edit objects in the Manager, close the Synchronization Editor.

To open an existing synchronization project in the Synchronization Editor

Select the SharePoint > Farms category.
Select the farm in the result list. Select the Change main data task.
Select the Edit synchronization project... task.

Detailed information about this topic

One Identity Manager Target System Synchronization Reference Guide

Related topics

Customizing the synchronization configuration

SharePoint web applications

SharePoint web applications provide permissions for SharePoint users that are valid across all websites within the web application. You can find information about SharePoint objects that the web application is linked to on the overview form. Defined users and permissions policies are shown for the web application. Valid SharePoint providers are displayed with the web applications for which they are registered.

In SharePoint, you can limit the amount of permissions that can be assigned to SharePoint permission levels. You can display all valid permissions for the web application on the overview form.

To obtain an overview of a web application

Select the SharePoint > Web applications category.
Select the web application in the result list.
Select the SharePoint web application overview task.

Related topics

SharePoint roles and permission levels

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© 2024 One Identity LLC. ALL RIGHTS RESERVED. 使用条款隐私 Cookie Preference Center