• Business Role Role - Permission to add business role

    Hello Everyone,

    I have a simple question for you and probably it is very simple but I am not finding the solution.

    I would like to add a "role" or permission to specific user so this user can add business roles for other users.

    please if you…

  • Assign One Identity manager Application Role to a Business Role

    Hi All, 

    I couldn't find a similar question on the forum or OID documentation. 

    I've created a permission group in the designer and assigned it to a Custom/new One Identity Manager Application Role. 

    Next step I would like to assign the One Identity…

  • Manual provisioning roles

    Hello Community,

    I'm in face of a problem, with the integration of OIM 8.2.

    We're working on the workflow approval for approbation of roles, and we have some roles that need manual approbation; that means the role need to provisioned on an application which is out…

  • Transport business roles with assigned AD groups

    Which relations to choose for transporting business roles with assigned AD groups by database transporter?

  • Analyzer functionalities for RBAC system

    Hi everyone,

    I need to implement an RBAC system with dynamic roles and I am using the Analyzer tool for the analysis. The version of 1IM is 8.1.5.

    I have some questions about the Analyzer functionalities.

    1. Is it possible to export a report with the…

  • How to find the history of users when they are in and out of a business role through dynamic role calculation?

    HI All,

    I have been looking how can I get the history information of any user who is being assigned/removed from a Business role via. a dynamic role calculation. 

    When I click on "Reports - Overview with Business roles and user accounts(incl. history)"…

  • Error deleting Business Roles and Dynamic Roles

    Hello everyone,

    I have a problem deleting business roles and dynamic roles.

    I started deleting dynamic roles but One Identity doesn't give me the possibility (grey icon). Maybe One doesn't appreciate that.

    I also tried deleting business roles…

  • Employee Manager Role for only Active Employees

    Hello Experts,

    I have been trying to figure out a way to assign the Employee Manager role in OneIM to only those who have active persons listed as their direct report.  Currently if a person has an inactive employee listed it still assigns the employee…

  • How to install Business Roles correctly?

    Hello experts!

    Installed via autorun.exe Busness Roles, but the field did not appear in the Manager(I am trying to set up IT Shop). What should be done?

    My version 8.12

  • Business role for active directory groups take a long time to add users

    Hello,

    Has anyone seen any issues with adding users to groups through a business role?

    We have a few that we need to add users to upon creation. It seems to take a good while before the users get added to the group.

    The business role is assigned but the…

  • Business Role owner cannot remove members

    we have around 300 business roles published as assignment resource on IT shop. Currently role owners can only see role information on IT shop.

    However, they annot remove members unlike manager of AD group, where group manager can remove members from…

  • Business Role and assigned Active Directory Group

    Hello,

    Can anyone tell me if I can see in any logs when a Group was removed from a business role?

    We had some issues and I see somethings missing for business roles.

    OrgHasUNSGroup table shows them is there somewhere i can see when it was removed and who…

  • Indirect Assignments of System Entitlements to Business Roles by System Roles

    Hi,

    I observe a strange behaviour on indirect assignments of System Entitlements to Business Roles (OrgHasUNSGroupB) in One Identity Manager 8.1.2 compared to the old system as 6.1.4

    Szenario:

    1. Create a System Role (ESet)

    2. Create and Assign a System…

  • Assign a Business role for managers that have direct reports in multiple locations.

    Hello Experts,

    I am trying to do something within OneIM for our company communications.  So the requirement is we have Location Based Distribution list that i have attached to Location based business role.  We have a Manager at Location A who gets the Location…

  • Is there a way to kick-off inheritance calculations?

    I'm using version 8.0.1. I've just done a transport of a lot of Business Roles and System Roles as well as entries from OrgHasEset. The business role structure is hierarchical and set to inherit top down. The problem is, none of the inheritance is working…

  • Fire a Process on Business Role Update

    Hi I'm using v 8.1.1. I want to fire a process when a particular column on the Business Role is updated. It looks like there's no UPDATE event on Org - there's only INSERT and there are no events on the BaseTree table. Is there any way I can fire a process…

  • Trigger process when user is assigned dynamic business role

    Hi,

    We are trying to fire a prosess when a user is inserted/assigned to a dynamic business role. I can trigger an prosess from PersonInOrg with the "insert"-event when i add the user directly to a business role, but when the user is added with a dynamic…

  • What is the actual use case for business and system roles in One Identity Manager (difference).

    Hello,

    Could someone help me to explain the difference between "business role" and "system role" in One Identity Manager.

    In the Identity Manager 8.0 - Business Roles Administration Guide I read:

    ...
    Various company resources can be…

  • How to Run a Report of All Assigned users to a Business Role

    Hello Experts,

    We have some business roles that are driven by a dynamic assignments based on their Deprtment, Title and Location.  I am trying to see if there is a way to have a report on all the members of those roles.  If i can do it in OneIM, Great! 

  • Automatically create a personwantsorg request based on business role

    Hi,

     

    We have a dynamic assignment of a business role. Our use case is that this business role should contain a few resources, but they should not be assigned to the user without a confirmation of their leader. Is it possible to "automatically" create…

  • Business Role Constraints - Automatic removal of one role based on the conflicting roles model

    Hola,

     

    One of the use cases we are looking to establish is to replace our current query based AD group memberships with Business Roles. The concept of configuring a pair of Business Roles and setting the other as a conflicting role is pretty straight…

  • Bulk Import Business Roles with Dynamic Query

    I have several hundred business roles that need to be created in One Identity Manager. Is there a way to bulk load them with the query included (maybe using Data Import)? If so, what table/view would I use? Thanks!

  • RE: delegation of business roles

    Hi Sergei,

    You can only delegate what you have currently assigned or are responsible for and the item has to be delegable. Please check your role class for the business roles you are missing in the delegation view. I assume that the role class is not set…