33. One Identity Администрация

9 октября 2019 г.

14:35

1) Разграничение Бизнес-ролей и подразделений.

То есть, Для сотрудника подразделения должны быть доступны к заказу только определенные бизнес-роли!

https://www.oneidentity.com/community/identity-manager/f/forum/5213/modifying-query-requesting-service-items-on-behalf-of-someone-else

Q3M_Fo rmTemp ate_Co mmo n Configure project Options Key IT shop IVI_StandardWeb VI _ ITS hop_ P roductSe lection Creatng requests by reference employees is allowed Products to display for a given list of recipients Products to display for a given recipient e Requests: Logged in user recipient Selectable r e fer ence employees e Service items tags enabled Value (standard) True and LlID_AccProduct in (select pr .uid_accproduct from basetree sh join basetree cu on sh.uid.org •IslnActve and UID_AccProduct in ( select pr.uid_accproduct from basetree sh join basetree cu on sh.uid.or@ = cu.uid_pare... cu.uid_pare.. IT Shop - Templates -Details Products to display for a given •IslnAcbve and IJID _AccProduct in ( select pr. uid _accproduct from base tree sh join base tree cu on sh.uid .or@ cu. uid _parentorg and

"IsInActive=0 and UID_AccProduct in
( select distinct uid_accproduct from AccProduct )"

Q3M_Fo rmTempIate_Co mmo n Iconfigureproject Options Key Displayed service categories Displayed service categories for a group of users IVI_StandardWeb Value (standard) VI _ ITS ho p_AccP roductGro upse lecto r Value (custom) ruid_a roductgroup in select V. uid_a rod. •uid_accproductgroup in (select v.uid_accprod... -Details Displa yed service categories •uid_accproductgroup in ( select v uid_accproductgroupparent from QER_VACCProductGroupCoIIecbon v