• Automatically Removing Non-Inherited Active Directory Group Memberships in a Dynamic Role-Based Access Model

    I have defined two business roles, and each has been assigned an Active Directory group as a resource that users should inherit by belonging to one role or the other. Membership to both roles is dynamic. How can I enforce that all group membership assignments…

  • Exchange full access permission in Business role

    Hi,

    I have a complete Exchange configuration where I’ve also imported mailboxes along with information about which users have Full Access to them. These mailboxes essentially function as shared mailboxes, and I’m able to manually add or remove Azure…

  • Xorigin membership from Business Role

    hello,

    the customer gave me this problem to solve.

    So, I have to manage the removal of memberships from Business Role in a flat way. That is, when a person loses a business role (for whatever reason), then all of his or her inherited entitlements from…

  • Business role module on workstation

    Hello, I'm not able to see the business roles module in my lab installation. I have installed the module by using the configuration wizard, but I cannot see the module in the installation procedure for the clients. Ho I can add the module to the product…

  • Filter Business Role > Membership > Request memberships list

    Dear Experts,

    We have a business requirement that for certain Business Roles, when the manager clicks on the Request memberships button on the Memberships page, only those with a certain property ont he Employee object should appear in the list.
    Is there…

  • Business Role Role - Permission to add business role

    Hello Everyone,

    I have a simple question for you and probably it is very simple but I am not finding the solution.

    I would like to add a "role" or permission to specific user so this user can add business roles for other users.

    please if you…

  • Assign One Identity manager Application Role to a Business Role

    Hi All, 

    I couldn't find a similar question on the forum or OID documentation. 

    I've created a permission group in the designer and assigned it to a Custom/new One Identity Manager Application Role. 

    Next step I would like to assign the One Identity…

  • Manual provisioning roles

    Hello Community,

    I'm in face of a problem, with the integration of OIM 8.2.

    We're working on the workflow approval for approbation of roles, and we have some roles that need manual approbation; that means the role need to provisioned on an application which is out…

  • Transport business roles with assigned AD groups

    Which relations to choose for transporting business roles with assigned AD groups by database transporter?

  • Analyzer functionalities for RBAC system

    Hi everyone,

    I need to implement an RBAC system with dynamic roles and I am using the Analyzer tool for the analysis. The version of 1IM is 8.1.5.

    I have some questions about the Analyzer functionalities.

    1. Is it possible to export a report with the…

  • How to find the history of users when they are in and out of a business role through dynamic role calculation?

    HI All,

    I have been looking how can I get the history information of any user who is being assigned/removed from a Business role via. a dynamic role calculation. 

    When I click on "Reports - Overview with Business roles and user accounts(incl. history)"…

  • Error deleting Business Roles and Dynamic Roles

    Hello everyone,

    I have a problem deleting business roles and dynamic roles.

    I started deleting dynamic roles but One Identity doesn't give me the possibility (grey icon). Maybe One doesn't appreciate that.

    I also tried deleting business roles…

  • Employee Manager Role for only Active Employees

    Hello Experts,

    I have been trying to figure out a way to assign the Employee Manager role in OneIM to only those who have active persons listed as their direct report.  Currently if a person has an inactive employee listed it still assigns the employee…

  • How to install Business Roles correctly?

    Hello experts!

    Installed via autorun.exe Busness Roles, but the field did not appear in the Manager(I am trying to set up IT Shop). What should be done?

    My version 8.12

  • Business role for active directory groups take a long time to add users

    Hello,

    Has anyone seen any issues with adding users to groups through a business role?

    We have a few that we need to add users to upon creation. It seems to take a good while before the users get added to the group.

    The business role is assigned but the…

  • Business Role owner cannot remove members

    we have around 300 business roles published as assignment resource on IT shop. Currently role owners can only see role information on IT shop.

    However, they annot remove members unlike manager of AD group, where group manager can remove members from…

  • Business Role and assigned Active Directory Group

    Hello,

    Can anyone tell me if I can see in any logs when a Group was removed from a business role?

    We had some issues and I see somethings missing for business roles.

    OrgHasUNSGroup table shows them is there somewhere i can see when it was removed and who…

  • Indirect Assignments of System Entitlements to Business Roles by System Roles

    Hi,

    I observe a strange behaviour on indirect assignments of System Entitlements to Business Roles (OrgHasUNSGroupB) in One Identity Manager 8.1.2 compared to the old system as 6.1.4

    Szenario:

    1. Create a System Role (ESet)

    2. Create and Assign a System…

  • Assign a Business role for managers that have direct reports in multiple locations.

    Hello Experts,

    I am trying to do something within OneIM for our company communications.  So the requirement is we have Location Based Distribution list that i have attached to Location based business role.  We have a Manager at Location A who gets the Location…

  • Is there a way to kick-off inheritance calculations?

    I'm using version 8.0.1. I've just done a transport of a lot of Business Roles and System Roles as well as entries from OrgHasEset. The business role structure is hierarchical and set to inherit top down. The problem is, none of the inheritance is working…

  • Fire a Process on Business Role Update

    Hi I'm using v 8.1.1. I want to fire a process when a particular column on the Business Role is updated. It looks like there's no UPDATE event on Org - there's only INSERT and there are no events on the BaseTree table. Is there any way I can fire a process…

  • Trigger process when user is assigned dynamic business role

    Hi,

    We are trying to fire a prosess when a user is inserted/assigned to a dynamic business role. I can trigger an prosess from PersonInOrg with the "insert"-event when i add the user directly to a business role, but when the user is added with a dynamic…

  • What is the actual use case for business and system roles in One Identity Manager (difference).

    Hello,

    Could someone help me to explain the difference between "business role" and "system role" in One Identity Manager.

    In the Identity Manager 8.0 - Business Roles Administration Guide I read:

    ...
    Various company resources can be…

  • How to Run a Report of All Assigned users to a Business Role

    Hello Experts,

    We have some business roles that are driven by a dynamic assignments based on their Deprtment, Title and Location.  I am trying to see if there is a way to have a report on all the members of those roles.  If i can do it in OneIM, Great! 

    …

  • Automatically create a personwantsorg request based on business role

    Hi,

     

    We have a dynamic assignment of a business role. Our use case is that this business role should contain a few resources, but they should not be assigned to the user without a confirmation of their leader. Is it possible to "automatically" create…