立即与支持人员聊天
与支持团队交流

Identity Manager 9.2 - Epic Healthcare System Administration Guide

Managing an Epic health care system Setting up synchronization with an Epic health care system Basic Data for managing an Epic health care system Epic EMP template Epic SubTemplate Epic Connection Epic EMP User Accounts Security Matrix Configuration parameters for managing Epic health care system Default project template for Epic

Assigning account definitions directly to identities

To assign an account definition directly to identities

1. In One Identity Manager, select the Epic healthcare| Basic configuration data | Account definitions | Account definitions category.

2. Select an account definition in the result list.

3. Select the Assign to identities task.

4. Assign identities in Add assignments.

NOTE: In Remove assignments, you can remove the assignment of identities. To remove an assignment, select the identity and double-click .

5. Save the changes.

Assigning account definitions to system roles

Installed modules: System Roles Module

NOTE: Account definitions with the Only use in IT Shop option can only be assigned to system roles that also have this option set.

To add account definitions to a system role

1. In One Identity Manager, select the Epic healthcare| Basic configuration data | Account definitions | Account definitions category.

2. Select an account definition in the result list.

3. Select the Assign system roles task.

4. Assign system roles in Add assignments.

NOTE: In Remove assignments, you can remove the assignment of system roles. To remove an assignment, select the system role and double-click .

5. Save the changes

Adding account definitions in the IT Shop

A account definition can be requested by shop customers when it is assigned to an IT Shop shelf. To ensure it can be requested, further prerequisites need to be guaranteed.

• The account definition must be labeled with the IT Shop option.

• The account definition must be assigned to a service item.

NOTE: In the Web Portal, all products that can be requested are grouped together by service category. To make the account definition easier to find in the Web Portal, assign a service category to the service item.

• If the account definition is only assigned to identities using IT Shop assignments, you must also set the Only for use in IT Shop option. Direct assignment to hierarchical roles may not be possible.

NOTE: IT Shop administrators can assign account definitions to IT Shop shelves if login is role-based. Target system administrators are not authorized to add account definitions in the IT Shop.

To add an account definition to the IT Shop

1. In One Identity Manager, select the Epic healthcare| Basic configuration data | Account definitions | Account definitions (non role-based login) category.

- OR -

In One Identity Manager, select the Entitlements | Account definitions (role-based login) category.

2. Select an account definition in the result list.

3. Select the Add to IT Shop task.

4. Assign the account definitions to the IT Shop shelves in Add assignments.

5. Save the changes.

To remove an account definition from individual IT Shop shelves

1. In One Identity Manager,, select the Epic healthcare| Basic configuration data | Account definitions | Account definitions (non role-based login) category.

- OR -

In One Identity Manager, select the Entitlements | Account definitions (role-based login) category.

2. Select an account definition in the result list.

3. Select the Add to IT Shop task.

4. Remove the account definitions from the IT Shop shelves in Remove assignments.

5. Save the changes.

To remove an account definition from all IT Shop shelves

1. In One Identity Manager, select the Epic healthcare | Basic configuration data | Account definitions | Account definitions (non role-based login) category.

- OR -

In One Identity Manager, select the Entitlements | Account definitions (role-based login) category.

2. Select an account definition in the result list.

3. Select the Remove from all shelves (IT Shop) task.

4. Confirm the security prompt with Yes.

5. Click OK.

The account definition is removed from all shelves by One Identity Manager Service. All requests and assignment requests with this account definition are canceled in the process.

Related topics

Assigning account definitions to a target system

The following prerequisites must be fulfilled if you implement automatic assignment of user accounts and identities resulting in administered user accounts.

• The account definition is assigned to the target system.

• The account definition has the default manage level.

User accounts are only linked to the identity (Linked state) if no account definition is given. This is the case on initial synchronization, for example.

To assign the account definition to a target system

1. In One Identity Manager, select the connection in the Epic healthcare | Connections.

2. Select the Change master data task.

3. Select the account definition for user accounts from the Account definition (initial) menu.

4. Save the changes.

Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级