4.4 Accounts

Determine the types of accounts required for your organization.

Do you need to set up accounts according to:

• Permissions?
• Location?
• Job function?
• Seniority?
• Other criteria?

Assign an ID and descriptive name for each template that should be created.

Determine who will set up model accounts to be used as templates by ID-Synch.

For more information see:

• Templates
• Types
• Locations

4.4.1 Roles

Decide how the templates should be grouped into roles in ID-Synch. These roles make it easy to create common sets of accounts for different types of user.

Assign an ID and descriptive name for each role that should be created.

For more information see HERE.

4.4.2 Account dependencies

Identify the account dependencies that meet technical or business needs. By identifying these dependencies, you create relationships between your templates that act as account creation parameters in ID-Synch.

For example, your company may require that a user has an Active Directory domain account before creating a Microsoft Exchange account.

Dependencies determine the order in which ID-Synch creates accounts. An attempt to create an account dependent on another will fail if the initial account does not exist.

Note:

You cannot create circular dependencies. For example: If template A depends on template B, and template B depends on template C, then you cannot make template C dependent on template A.

See HERE for more information.

4.4.3 Account request attributes

When end users request new accounts for themselves or others, ID-Synch can prompt requesters for additional information, or obtain the information via a plug-in. For example, request attributes can be defined to gather human resource information such as date of birth, or social security number.

You must also decide how request attributes will map to actual attributes on target systems.

The following table illustrates an example of an attribute map:

ID-Synch attribute	Windows 2000	Lotus Notes ID files	Lotus Notes Domino HTTP
Mail server	N/A	mailServer	mailServer
Manager	manager	Manager	Manager
Location	co	Location	Location
Department	department	Department	Department
Job title	title	Job Title	Job Title
Phone number	telephoneNumber	OfficePhoneNumber	OfficePhoneNumber

See Defining request attributes for more information.

4.4.4 Access controls

Determine who should be able to view and modify each request attribute. In ID-Synch you can group request attributes, then assign privileges to those groups to certain authorizers, requesters, and recipients.