Identity Manager Dashboard allows you to modify the settings for every client configured in identity applications. An administrator must have access to Your ID > Settings page to modify the client settings.
The Settings page also allow you to add a client settings in the identity applications. To add a new client settings, click and specify the Client Name and LDAP Filter to match. You can perform the following activities in this page:
The General tab allows you modify the basic client settings.
Represents the name of a client.
Represents the condition that helps to determine the client settings to be applied for the logged in user. If no condition is matching then it applies the default client settings.
The Customization tab allows you to modify the Users page view for the selected client. You can also specify general settings for notifications and request forms.
Select the following options from Navigation items to customize views for your client:
The User settings enable you to configure the attributes displayed in the Users page for the selected client.
Represents the attributes that you want the application to display by default when the user selects Card View in the Users page.
Represents additional attributes that provide details about a selected user.
Represents the attributes that can be modified for a user’s details. For most attributes, you can also enter text to serve as default values or examples to aid in new user creation, as desired.
The following example allows a client user to edit Title, Manager, Telephone Number, Manager, and Direct Report attributes:
Figure 10-1 Editable Attributes
To add more attributes to the list, click Add. You can also select a different attribute from the list to modify the editable attributes.
Represents the attributes that users can define when searching for a user or filtering search results in the Users page.
Represents the default container for storing users and how the application responds when displaying search results.
Base Container
Specifies the container in the Identity Vault that stores a newly created user.
When creating a user, you can see this value but cannot modify it. This limitation ensures that all users are stored in the same container for that client.
User Search Limit
Specifies the maximum number of users that the application can list as a result of a user search.
View Permission Type
Enable the permission types such as Roles, Resources, and PRD. This allows your client users to view or request the permission types that are selected.
By default, all the permission types are enabled.
The General settings specify how the client responds upon user login and when the user initiates forms.
Specifies the number of days before a task or role expires that the application begins displaying a notification when the user logs in.
Specifies whether the application opens a new window or a dialog box when the user makes a new request for permissions. When selected, the application opens a new window.
Specifies whether the application opens a new window or a dialog box when the user selects task to approve. When selected, the application opens a new window.
Allows the client users to approve or deny multiple requests at a time.
Specifies the period for an information message to appear on the page.
Specifies the Identity Governance URL.
Specifies the manager’s hierarchy. This helps the helpdesk users to reassign the helpdesk tickets to the managers of the specified level. You can set the hierarchy up to 3.
The Entity settings enable you to configure the attributes. The entities are created using Designer. For more information see, About Entities and Attributes in the NetIQ Identity Manager - Administrator’s Guide to Designing the Identity Applications.
To configure an entity, click the icon and select the entity type from the drop down menu. The deployed entities are displayed in the drop down menu. Click Create. This displays the selected entity in the Entities tab and in the Navigation items menu.
To delete an entity, select the entity from the Navigation items menu and click the icon. The deleted entity will not be listed under the Entities tab.
Represents the attributes that you want the application to display by default when you select the created entity in the Entities tab
In the example shown in Figure 10-2, description, direct reports, company, language, photo, manager, city, mobile, title, and CN are selected for display by default.
Figure 10-2 View Attributes
Represents the attributes that can be modified for an entity. You can add or delete attributes from the list of available entities.
In the example shown in Figure 10-3, direct reports, description, city, company, language, photo, manager, mobile, and title attributes are editable.
Figure 10-3 Editable Attributes
To add additional attributes to the list, click Add.
It represents the attributes that can be used to search an object. This setting is used to list the entities. This is a mandatory attribute.
In the example shown in Figure 10-4, CN and Description are the search attributes.
Figure 10-4 Search Attribute
Specifies the container in the Identity Vault that stores a newly created entity.
This value cannot be modified. Therefore, all entities are stored in this container for a particular client.
You can control user accesses using Access tab, this allows you to specify which user accounts are trustees for the user and configuration based functions within the client. When a trustee logs in, the application displays the page that has been provisioned. Otherwise, the page is hidden. You can add users, groups, roles, and containers as trustees.
When configuring user access, you should consider the following conditions:
Make sure that the users specified in Trustees are having sufficient Identity Vault rights to perform tasks within the Identity Applications. However, trustees can access the page but operations on the page will fail if they do not have the proper Identity Vault rights.
Each Navigation item has a set of default trustees suitable for the services that can be accessed through that page. However, if you remove all trustees for a navigation item, every user will be able to access that page.
If a user does not have access to the default navigation (or to the default menu item within a navigation area), the application redirects the user to the Dashboard page. The application might also display an error message, such as when a user attempts to login to page without proper authorization. The user can log in but will be directed to the Dashboard page.
When a user is in proxy mode, the application provides access according to the permissions for the account being proxied, as opposed to the permissions for the logged in user. The proxy can perform tasks on behalf of the other user but does not assume any of the role-type permissions. For example, a user cannot perform Domain Administrator functions on behalf of a Domain Administrator unless that user also has that role.
You can use your organization’s logo and name in the header and footer of the dashboard. You also can specify your brand colors and localize the content in the header.
In Advanced Settings, you can specify the customized cascading style sheet (CSS).
Click Download Sample CSS, to download the sample Custom.css file.
Modify the Custom.CSS file values and click Upload CSS.
For more information about applying your brand to the Dashboard, click on the Dashboard and see Customize the Branding.
Helpdesk configuration is a two-part process. First you set up the Helpdesk contact details followed by setting up granular permission details for the Helpdesk users.
As part of configuring Helpdesk contact details, you can specify Helpdesk information such as Helpdesk Admin,Email Address, and Contact Number for each of the clients configured in the system. A client user will immediately see the Helpdesk contact information when the administrator completes configuring the Helpdesk for the client.
A Helpdesk user is a user configured to perform certain tasks for the tickets raised by the client users. For more information about what tasks can be performed by a Helpdesk user, see Understanding a Client Helpdesk.
NOTE:
Ensure that the helpdesk admin user has read access to manager property of the user container. For more information about adding user properties with required rights, see Verifying the User Properties in NetIQ Identity Manager Setup Guide for Windows.
NetIQ recommends not to assign helpdesk admin role to a team manager to avoid conflicts in between these roles.
For granting permissions, you must assign Helpdesk resources to the corresponding Helpdesk users.
NOTE:You cannot assign Helpdesk resources directly to a team or group. If you want to grant helpdesk accesses to a team or group, you must include each members from the group or team individually for the required access rights. Alternatively, you can perform the following steps:
Create a role for helpdesk users. See Creating a New Role.
Map the required helpdesk resources to the newly created role. See Mapping Resources to Roles.
(Conditional) Assign this role to a group. See Assigning Roles to Users.
(Conditional) Team Manager can request for this role on behalf of team members. Approving this role to the team allows team members to use helpdesk resources.
The Helpdesk section lists all Helpdesk resources.
Selected users are allowed to view teams and team members configured for the respective client.
Selected users can view details of any user of the respective client.
Selected users can reassign the user’s tasks to the approver’s manager.
NOTE:You can configure Managers Hierarchy in Customization to help the Helpdesk users to reassign the user’s tasks to the managers of the specified level, if necessary.
Selected users can view request history of any user of the respective client.
Selected users can view the organization chart of the respective client.
Selected users can view groups of the respective client.
After Helpdesk is configured, users can find the Helpdesk information in the following places:
(Conditional) Navigate to Your ID > Helpdesk.
On the Request History page.
(Conditional) At the footer.
To show the Helpdesk information in the footer, enable Show in Footer.
NOTE:You must ensure that the footer is enabled for the client that you have selected. To enable it, go to Settings > Branding > Footer. For more information, click on the Dashboard.
You can provision Dashboard Widgets for a User, Group, Container, or a Role.
You also can modify the Trustees for a selected widget. For more information, click on the Dashboard.
If you want to remove a client settings from identity applications, perform the following steps:
Click .
Select the client settings from the table that you want tot delete.
Click .