Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Home / Self-Service Access Request Management / Assets and Access Request Items / Current: Creating Asset Types


Asset Types are special categories of resources that are not automatically provisioned through provisioning policies, but must always be requested. Asset Types can be calls to EmpowerID dlls or other custom .NET assemblies that provision/de-provision actual resources that exist in the Resource table of the EmpowerID Identity Warehouse, like shared folders, user accounts, and Exchange mailboxes or they can be simple creations of objects (generic assets) added to the Identity Warehouse for tracking purposes only, such as a mobile phone or a company laptop.

This topic demonstrates how to create Asset Types in EmpowerID.

To create a generic asset type

From


  1. In the Navigation Sidebar of the EmpowerID Web interface,
navigate to the Find Assets page by expanding
  1. expand Resources and
clicking
  1. click Assets.
  2. From the Find Assets page, click the Actions tab and then click the Create Asset Type tile.

    Image Added

  3. In the New Asset Type form that appears,
do the following:Type an appropriate display name, name
  1. enter a name and description for the asset type in the Display Name, Name and Description fields
, respectively
  1. .
  2. Select Generic Asset from the Resource Type drop-down and click Submit.

Click Submit.



  1. Tip

    For immediate processing, leave Wait to See Results selected. If you clear Wait to See Results and click Submit, the process idles and EmpowerID creates a task for it, routing it to any Person with the delegations to continue moving the people.


    Image Added

  2. From the grid of the Select Resource System screen that appears, click the Generic Asset System item to select it and

then
  1. click Submit.

Image Removed


  1. Image Added

  2. Click OK to close the Operation Execution Summary.

To create an Asset Type for an AD User Account

As a prerequisite to creating an Asset Type for AD user accounts, you first need to connect EmpowerID


Info
titlePrerequisites

EmpowerID must be connected to Active Directory.

...

This creates the necessary security boundary around the asset type. For step-by-step instructions,

...

see Connecting to Active Directory.


  1. From In the Navigation Sidebar of the EmpowerID Web interface, navigate to the Find Assets page by expanding , expand Resources and clicking click Assets.
  2. From the Find Assets page, click the Actions tab and then click the Create Asset Type tile.
  3. In the New Asset Type form that appears, do the following:Type an appropriate display name, name enter a name and description for the asset type in the Display Name, Name and Description fields, respectively.

    Image Added

  4. Select User Account from the Resource Type drop-down

    .
  5. Click Submit.
  6. and click Submit.

    Tip

    For immediate processing, leave Wait to See Results selected. If you clear Wait to See Results and click Submit, the process idles and EmpowerID creates a task for it, routing it to any Person with the delegations to continue moving the people.


    Image Added

  7. In the Select Account Store lookup that appears, search for your Active Directory account store.
  8. From the grid, click the record returned for the account store to select it and then click Submit.

    Image Added

  9. In the Select a creation location lookup that appears, search for the OU in which you want the AD user accounts to be created, click the node for that location in the tree-view and then click Submit.

    Image Added

  10. In the Asset Configuration form that appears, select user from the ObjectClass drop-down, type the LDAP path to the OU you selected above and then click Submit.

    Image Added

  11. Click OK to close the Operation Execution Summary.

To create an Asset Type for an Exchange Mailbox

As a prerequisite to creating an Asset Type for Exchange Mailboxes, you first need to connect


Info
titlePrerequisites

Connect EmpowerID to an Active Directory that has an Exchange Organization. Doing so creates the necessary security boundary for the asset type. For step-by-step instructions,

...

see Connecting to Active Directory.


  1. From In the Navigation Sidebar of the EmpowerID Web interface, navigate to the Find Assets page by expanding , expand Resources and clicking click Assets.
  2. From the Find Assets page, click the Actions tab and then click the Create Asset Type tile. Image Removed

    Image Added

  3. In the New Asset Type form that appears, do the following:Type an appropriate display name, name enter a name and description for the asset type in the Display Name, Name and Description fields, respectively.
  4. Select Exchange Mailbox from the Resource Type drop-down

    .Click Submit.

    and click Submit.

    Tip

    For immediate processing, leave Wait to See Results selected. If you clear Wait to See Results and click Submit, the process idles and EmpowerID creates a task for it, routing it to any Person with the delegations to continue moving the people.


    Image Added

  5. In the Select Resource System lookup that appears, click the record for the appropriate Exchange organization to select it and then click Submit. Image Removed

    Image Added

  6. In the Asset Configuration screen that appears, do the following:
    1. Select the domain in which the user must have an account from the Depends on having account in the domain drop-down. Users must have an
    AD
    1. Active Directory account to receive an Exchange Mailbox asset.
    2. Select the appropriate
    AD
    1. Active Directory asset type from the Provision this asset if missing dependency drop-down. If the user does not
    currently
    1. have an AD account, EmpowerID
    will first provision an AD account from
    1. provisions one of the specified asset type.
    Please note that you
    1. You must
    first
    1. create an Asset Type Request for an AD user account before any values
    will
    1. appear in this drop-down.
    2. Click Submit.

      Image Added

  7. Click OK to close the Operation Execution Summary.

To create an Asset Type for a home folder

As prerequisites to creating an Asset Type for shared folders, you first need to connect


Info
titlePrerequisites

Connect EmpowerID to your Active Directory and add a resource system for a Windows Server resource type to EmpowerID. For step-by-step instructions, see Connecting to Active Directory and Adding File Servers.

In addition, you

You must have at least one shared folder on the server

as any

, because newly created shared folder assets

created will be

are placed

under

in the selected parent folder.


  1. From In the Navigation Sidebar, navigate to the Assets management page by expanding expand Resources and clicking click Assets.
  2. From the Assets management page, click the Actions tab and then click the b>Create Create Asset Type tile. Image Removed

    Image Added

  3. In the New Asset Type form that appears, do the following:Type an appropriate display name, name enter a name and description for the asset in the Display Name, Name and Description fields, respectively.
  4. Select Shared Folder from the Resource Type drop-down and click Submit.

  5. Click Submit.


  6. Tip

    For immediate processing, leave Wait to See Results selected. If you clear Wait to See Results and click Submit, the process idles and EmpowerID creates a task for it, routing it to any Person with the delegations to continue moving the people.


    Image Added

  7. From the grid of the Select Resource System screen that appears, click the Windows Server resource system item to select it and then click Submit.

    Info

    You must add a resource system for

    the

    Windows Server to EmpowerID

    before

    for it

    will

    to appear in the grid.


    Image Added

  8. In the Asset Configuration form that appears, do the following:
    1. Click Create as Share and then click Create as Share again if the folder is a shared folder.
    2. Select Hide Share if the folder is a shared folder that you want to hide on the File server.
    3. Select the drive letter for the Shared folder from the Map to Drive drop-down. EmpowerID writes this value to the user's AD account.
    4. Select the AD account store in which the shared folders are to be created from the Depends on having account in the domain drop-down.
    5. Select the prerequisite AD asset type from the Provision this asset if missing dependency drop-down. As users must have an AD user account before they can have a home folder, EmpowerID will provision
  9. the appropriate
    1. a user account if the user does not yet have one.

      Image Added

  10. In the Shared Folder lookup that appears, search for the parent shared folder under in which the shared folder assets are to be createdto create home folders, click that folder in the grid to select it, and then click Submit.

    Image Added

  11. Click OK to close the Operation Execution Summary.

...