Identity Manager Roles Based Provisioning Module 3.7.0 ... - NetIQ

More documents

Recommendations

Info

11 Managing Work for Users, Groups, Containers, Roles, and Teams 167 11.1 Selecting a User, Group, Container, Role, or Team. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167 11.2 Changing to a Different Managed Entity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170 11.3 Minimizing the Screen Space Used by The User Profile Section. . . . . . . . . . . . . . . . . . . . . . 170 11.4 Exiting Manage Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171 12 Controlling Your Settings 173 12.1 About the Settings Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173 12.1.1 About Proxies and Delegates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173 12.1.2 Sample Usage Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174 12.1.3 User Access to the Settings Menu. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174 12.2 Acting as a Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177 12.3 Specifying Your Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178 12.3.1 Setting Your Availability Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179 12.3.2 Creating or Editing an Availability Setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180 12.3.3 Deleting an Availability Setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183 12.4 Viewing and Editing Your Proxy Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183 12.4.1 Displaying Your Proxy Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184 12.4.2 Creating or Editing Proxy Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184 12.4.3 Deleting Proxy Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185 12.5 Viewing and Editing Your Delegate Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186 12.5.1 Displaying Your Delegate Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186 12.5.2 Creating or Editing Delegate Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187 12.5.3 Deleting a Delegate Assignment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189 12.6 Viewing and Editing Your Team Proxy Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189 12.7 Viewing and Editing Your Team Delegate Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193 12.8 Specifying Your Team’s Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198 12.9 Making a Team Process Request . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202 13 Making a Process Request 205 13.1 About Process Requests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205 13.2 Making a Process Request . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206 13.3 Deep Linking to a Request. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210 Part IV Using the Roles and Resources Tab 213 14 Introducing Roles and Resources 215 14.1 About the Roles and Resources Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215 14.1.1 About Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216 14.1.2 About Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220 14.2 Accessing the Roles and Resources Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222 14.3 Exploring the Tab’s Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222 14.4 Roles and Resources Actions You Can Perform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223 14.5 Understanding the Icons Used on the Roles and Resources Tab . . . . . . . . . . . . . . . . . . . . . 224 15 Managing Roles in the User Application 227 15.1 Browsing the Role Catalog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 15.1.1 Viewing Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 15.1.2 Creating New Roles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229 8 Identity Manager Roles Based Provisioning Module 3.7.0 User Application: User Guide
15.1.3 Editing an Existing Role. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238 15.1.4 Deleting Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238 15.1.5 Assigning Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239 15.1.6 Refreshing the Role List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241 15.1.7 Customizing the Role List Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241 16 Managing Resources in the User Application 243 16.1 Browsing the Resource Catalog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243 16.1.1 Viewing Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243 16.1.2 Creating New Resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245 16.1.3 Editing an Existing Resource. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259 16.1.4 Deleting Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259 16.1.5 Assigning Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259 16.1.6 Refreshing the Resource List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262 16.1.7 Customizing the Resource List Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262 17 Managing Separation of Duties in the User Application 265 17.1 Browsing the SoD Catalog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265 17.1.1 Viewing Separation of Duties Constraints . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265 17.1.2 Creating New Separation of Duties Constraints . . . . . . . . . . . . . . . . . . . . . . . . . . . 266 17.1.3 Editing an Existing Separation of Duties Constraint . . . . . . . . . . . . . . . . . . . . . . . . 268 17.1.4 Deleting Separation of Duties Constraints. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268 17.1.5 Refreshing the Separation of Duties Constraint List . . . . . . . . . . . . . . . . . . . . . . . . 268 18 Creating and Viewing Reports 269 18.1 About the Role Reporting Actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269 18.2 Role Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269 18.2.1 The Role List Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269 18.2.2 The Role Assignment Report. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271 18.3 SoD Reports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273 18.3.1 SoD Constraint Report. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273 18.3.2 SoD Violations and Exceptions Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274 18.4 User Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275 18.4.1 User Roles Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275 18.4.2 User Entitlements Report. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277 19 Configuring the Role and Resource Settings 281 19.1 About the Configure Roles and Resources Settings Action. . . . . . . . . . . . . . . . . . . . . . . . . . 281 19.2 Configuring the Roles Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281 19.3 Configuring the Resources Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282 19.4 Configuring the Entitlement Query Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283 19.5 Configuring the Separation of Duties Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283 19.6 Configuring the Report Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284 Part V Using the Compliance Tab 285 20 Introducing the Compliance Tab 287 20.1 About the Compliance Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287 20.1.1 About Compliance and Attestation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287 20.2 Accessing the Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290 Contents 9
Page 1 and 2: AUTHORIZED DOCUMENTATION User Appli
Page 4 and 5: 4 Identity Manager Roles Based Prov
Page 6 and 7: 4 Using the Associations Report 55
Page 10 and 11: 20.3 Exploring the Tab’s Features
Page 12 and 13: Part Part III, “Using the Work Da
Page 14 and 15: 14 Identity Manager Roles Based Pro
Page 18 and 19: • Roles, which enable you to: •
Page 20 and 21: • Erik (an end user) performs a s
Page 22 and 23: 1.2 Accessing the Identity Manager
Page 24 and 25: 2 Type your username and click Subm
Page 26 and 27: 2 Click the Help link (in the top r
Page 28 and 29: Button Description Localize Display
Page 30 and 31: To use filtering: 1 Specify a value
Page 36 and 37: Figure 2-1 The Organization Chart P
Page 38 and 39: Table 2-2 Actions Available Through
Page 42 and 43: Figure 3-1 Default View at Login In
Page 44 and 45: 3.2 Navigating the Chart This secti
Page 46 and 47: Table 3-1 Types of Organization Cha
Page 48 and 49: Action Expand Manager-Employee Expa
Page 50 and 51: The Lookup page displays your searc
Page 52 and 53: This part of the message Body Conta
Page 56 and 57: Figure 4-1 The Associations Report
Page 58 and 59:
58 Identity Manager Roles Based Pro
Page 60 and 61:
If you want to change some of these
Page 62 and 63:
2 Specify search criteria for the u
Page 64 and 65:
If you see a list of groups that in
Page 66 and 67:
2 Specify the recipients of the mes
Page 68 and 69:
Figure 5-3 The My Profile Page Show
Page 70 and 71:
This is the detailed information ab
Page 72 and 73:
The Identity Manager User Applicati
Page 74 and 75:
Figure 6-2 Specify a Search Criteri
Page 76 and 77:
6.2 Performing Basic Searches 1 Go
Page 78 and 79:
To perform an advanced search: 1 Go
Page 80 and 81:
If the attribute is a User (item ca
Page 82 and 83:
The Lookup page displays: 2 Specify
Page 84 and 85:
For instance, all of the following
Page 86 and 87:
• Revise Search • Export Result
Page 88 and 89:
This page is just like the My Profi
Page 90 and 91:
4 Use the Format drop-down list to
Page 92 and 93:
6.5.4 To Delete a Saved Search 1 In
Page 94 and 95:
7.2 Password Challenge Response Cha
Page 96 and 97:
7.5 Password Policy Status You are
Page 98 and 99:
3 Specify values for the following
Page 100 and 101:
3 Specify values for the following
Page 102 and 103:
You can expand or collapse the node
Page 104 and 105:
Chip chip c c* *p *h* A manager loo
Page 106 and 107:
106 Identity Manager Roles Based Pr
Page 108 and 109:
Page 110 and 111:
Figure 9-1 Work Dashboard If you go
Page 112 and 113:
Action Make a Process Request Descr
Page 114 and 115:
Icon Terminated: Retracted Descript
Page 116 and 117:
9.6.1 User Self-Service The authent
Page 118 and 119:
Table 9-8 Task Notifications for Do
Page 120 and 121:
Table 9-11 Task Notifications for D
Page 122 and 123:
To perform this action... Retract r
Page 124 and 125:
To perform this action... View work
Page 126 and 127:
• When a group is selected, the l
Page 128 and 129:
10.1.2 Viewing the Summary for a Ta
Page 130 and 131:
A pop-up window displays to indicat
Page 132 and 133:
• The name of the user who made t
Page 134 and 135:
If the task requires a digital sign
Page 136 and 137:
The User Application displays a mes
Page 138 and 139:
When no filters are defined, the De
Page 140 and 141:
2 To expand the task list display b
Page 142 and 143:
2 To specify that the action of ope
Page 144 and 145:
The Resource Administrator and Reso
Page 146 and 147:
Scrolling within the Resource Assig
Page 148 and 149:
7 If there are additional custom fi
Page 150 and 151:
• When a role is selected, the Ro
Page 152 and 153:
Sorting the Role Assignment List To
Page 154 and 155:
The User Application displays the l
Page 156 and 157:
• The Recipient column identifies
Page 158 and 159:
Status summary icon Detailed Status
Page 160 and 161:
10.4.2 Viewing the Summary for a Re
Page 162 and 163:
To remove all previously defined fi
Page 164 and 165:
2 To display the details within the
Page 166 and 167:
The Retract button is enabled only
Page 168 and 169:
2 In the Manage control, select the
Page 170 and 171:
11.2 Changing to a Different Manage
Page 172 and 173:
• In the Manage dialog, click the
Page 174 and 175:
Proxy Assignments When a Role Is th
Page 176 and 177:
Settings Menu Option Team Settings>
Page 178 and 179:
2 Select the user for whom you want
Page 180 and 181:
This information is particularly he
Page 182 and 183:
Button Duration End date No Expirat
Page 184 and 185:
Only Provisioning Administrators, P
Page 186 and 187:
NOTE: The User Application does not
Page 188 and 189:
Button No Expiration Specify Expira
Page 190 and 191:
2 Click Select a team to select a t
Page 192 and 193:
Alternatively, use the Object Selec
Page 194 and 195:
manager can still view delegate set
Page 196 and 197:
3 Click Continue. 4 In the Team Mem
Page 198 and 199:
Field Available Requests in Selecte
Page 200 and 201:
7 Specify the status by selecting o
Page 202 and 203:
The All Request Types check box is
Page 204 and 205:
9h If you select a certificate that
Page 206 and 207:
13.2 Making a Process Request To ma
Page 208 and 209:
5i Click Preview to see the user ag
Page 210 and 211:
If the digital signature type is se
Page 212 and 213:
Page 214 and 215:
Page 216 and 217:
14.1.1 About Roles This section pro
Page 218 and 219:
When you define a role, you can opt
Page 220 and 221:
Role Roles Manager Description A sy
Page 222 and 223:
Resource Requests Resources can be
Page 224 and 225:
Table 14-2 Roles and Resources Acti
Page 226 and 227:
Icon Higher Level Relationship Desc
Page 228 and 229:
2 Specify a filter string for the r
Page 230 and 231:
2 Provide details for the role defi
Page 232 and 233:
2 Click Add. The Add Role Relations
Page 234 and 235:
For entitlements that take static p
Page 236 and 237:
Field Standard Approval Description
Page 238 and 239:
You need to have permission to retr
Page 240 and 241:
2 Fill in the fields on the Add Rol
Page 242 and 243:
2 To include an additional column i
Page 244 and 245:
2 In the Filter dialog, specify a f
Page 246 and 247:
Field Description Categories Owners
Page 248 and 249:
The Entitlement tab shows informati
Page 250 and 251:
2 To assign a dynamic value at requ
Page 252 and 253:
3 To assign a dynamic value at requ
Page 254 and 255:
2b The Request Form tab adds a new
Page 256 and 257:
If the Allow role approval process
Page 258 and 259:
For each field on the request form,
Page 260 and 261:
Assigning a Resource From the Catal
Page 262 and 263:
16.1.6 Refreshing the Resource List
Page 264 and 265:
Page 266 and 267:
2 Specify a filter string for the c
Page 268 and 269:
Field Default Approvers Approvers D
Page 270 and 271:
3 Select Show all administrative de
Page 272 and 273:
3 Choose to show all role assignmen
Page 274 and 275:
3 Choose to list all SoD Constraint
Page 276 and 277:
• The Roles in which each user ho
Page 278 and 279:
3 In the User Selection pane, selec
Page 280 and 281:
Page 282 and 283:
The following settings are read-onl
Page 284 and 285:
Field Quorum Description Select Quo
Page 286 and 287:
Page 288 and 289:
Attestation Requests and Processes
Page 290 and 291:
20.2 Accessing the Tab To access th
Page 292 and 293:
Table 20-2 Compliance Actions Categ
Page 294 and 295:
20.6 Common Compliance Actions The
Page 296 and 297:
20.6.4 Defining the Attestation For
Page 298 and 299:
2 Click Submit to initiate the atte
Page 300 and 301:
Page 302 and 303:
2 If you want to use the details fr
Page 304 and 305:
4 Select the SoD constraints whose
Page 306 and 307:
4 In the Verify Assignments For box
Page 308 and 309:
4 In the Verify Roles Assigned To b
Page 310 and 311:
• The Attestation Type column ind
Page 312 and 313:
The Attester column in the Request
Page 314:
6b2 To view those processes that ha
show all

Identity Manager Roles Based Provisioning Module 3.7.0 ... - NetIQ

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?