立即与支持人员聊天
与支持团队交流

Identity Manager 9.2 - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Dynamic roles Departments, cost centers, and locations
One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations Creating and editing departments Creating and editing cost centers Creating and editing locations Setting up IT operating data for departments, cost centers, and locations Assigning identities, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded identities Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Certifying departments, cost centers, and locations Reports about departments, cost centers, and locations
Identity administration
One Identity Manager users for managing identities Basics for managing identities Creating and editing identities Assigning company resources to identities Displaying the origin of identities' roles and entitlements Analyzing role memberships and identity assignments Deactivating and deleting identities Deleting all personal data Limited access to One Identity Manager Changing the certification status of identities Displaying the identities overview Displaying and deleting identities' Webauthn security keys Determining the language for identities Determining identities working hours Manually assigning user accounts to identities Entering tickets for identities Assigning extended properties to identities Reports about identities Basic configuration data for identities
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing identities Configuration parameters for managing devices and workdesks

Creating and editing multi-request resources

Multi-request resources are resources that an identity can request multiple times in the IT Shop. Requests are automatically canceled once approved. The resources are not explicitly assigned to identities.

Multi requestable/unsubscribable resources are resources that an identity can request multiple times in the IT Shop, but that must be explicitly returned when they are no longer needed. The resources are assigned to the identities after approval has been granted. They remain assigned until the request is canceled.

You can only edit multi-request resources if the QER | ITShop configuration parameter is set.

  • In the Designer, check if the configuration parameter is set. Otherwise, set the configuration parameter and compile the database.

To create or edit multi-request resources

  1. In the Manager, select the Entitlements > Multi-request resources for IT Shop category.

  2. Select a resource in the result list and run the Change main data task.

    - OR -

    Click in the result list.

  3. Edit the multi-request resource's main data.

  4. Save the changes.

To create or edit multi requestable/unsubscribable resources

  1. In the Manager, select the Entitlements > Multi requestable/unsubscribable resources for IT Shop category.

  2. Select a resource in the result list and run the Change main data task.

    - OR -

    Click in the result list.

  3. Edit the multi requestable/unsubscribable resource's main data.

  4. Save the changes.
Detailed information about this topic

Main data for multi-request resources

Enter the following main data of a multi-request resource.

Table 61: Main data for a multi-request resource
Property Description

Multi-request resource

Multi requestable/unsubscribable resource

Resource identifier.

Resource type

Resource type for grouping resources.

Service item

Service item through which you can request the resource in the IT Shop. Assign an existing service item or add a new one.

Risk index

Value for evaluating the risk of assigning the resource to identities. Set a value in the range 0 to 1. This input field is only visible if the QER | CalculateRiskIndex configuration parameter is set.

For more information, see the One Identity Manager Risk Assessment Administration Guide.

IT Shop

Specifies whether the resource can be requested through the IT Shop. This resource can be requested through the Web Portal and allocated by defined approval processes. The resource can still be assigned directly to identities and roles outside of the IT Shop.

This option cannot be disabled. For more information, see the One Identity Manager IT Shop Administration Guide.

Only for use in IT Shop

Specifies whether the resource can be requested through the IT Shop. This resource can be requested through the Web Portal and allocated by defined approval processes. The resource cannot be directly assigned to roles outside the IT Shop.

This option cannot be disabled. For more information, see the One Identity Manager IT Shop Administration Guide.

Description

 Text field for additional explanation.

Spare field no. 01 ... Spare field no. 10

Additional company-specific information. Use the Designer to customize display names, formats, and templates for the input fields.

Related topics

Assigning multi-request resources to identities

Assign multi requestable resources through IT Shop requests to identities. To do this, add identities to a shop as customers. All resources, which are assigned to this shop can be requested by the customers. For more information, see the One Identity Manager IT Shop Administration Guide.

Detailed information about this topic

Adding multi-request resources to the IT Shop

A multi-request resource can be requested by shop customers when it is assigned to an IT Shop shelf. For more information, see the One Identity Manager IT Shop Administration Guide.

To set up multi-request resources and add them as products in the IT Shop

  1. In the Manager, select the Entitlements > Multi-request resources for IT Shop category.

  1. Click in the result list.

  2. Edit the resource's main data.

  3. Save the changes.

  4. Select the Add to IT Shop task.

    In the Add assignments pane, assign a shelf.

    TIP: In the Remove assignments pane, you can remove shelf assignments.

    To remove an assignment

    • Select the shelf and double-click .

  5. Save the changes.

To set up multi requestable/unsubscribable resources and to add them as products to the IT Shop

  1. In the Manager, select the Entitlements > Multi requestable/unsubscribable resources for IT Shop category.

  1. Click in the result list.

  2. Edit the resource's main data.

  3. Save the changes.

  4. Select the Add to IT Shop task.

    In the Add assignments pane, assign a shelf.

    TIP: In the Remove assignments pane, you can remove shelf assignments.

    To remove an assignment

    • Select the shelf and double-click .

  5. Save the changes.

To remove multi-request resources from all IT Shop shelves

  1. In the Manager, select the Entitlements > Multi-request resources for IT Shop category.

    - OR -

    In the Manager, select the Entitlements > Multi requestable/unsubscribable resources for IT Shop category.

  2. Select a resource in the result list.

  3. Select the Remove from all shelves (IT Shop) task.

  4. Confirm the security prompt with Yes.

  5. Click OK.

    The resource is removed from all shelves by the One Identity Manager Service. This cancels all requests for this resource.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级