How do you organise the management of your IdM system?

Hi Everyone,
We're just starting off on our IdM project and I'm looking for some help and advice around how you've organised roles and responsibilities for managing your IdM system. Things like:
   - Who is responsible for managing the RunTime environments?
   - Who is responsible for managing the UI infrastructure?
   - Who configures Idm using the MMC?
   - Who configured IdM using the UI?
I'm a basis guy and have built a sandpit environment to get a look at the product and understand a little more about how it works. At the MMC level it seems all or nothing which makes me question who I should let have access to this. Perhaps I should let more people have access to Dev, but not in Test / Live?? And use the system copy mechanism to promote to live.
Personally I see the Basis team managing the Runtime and UI infrastructure. The 'IdM' / security team managing via the UI, but I'm not clear about who to give access to the MMC.
I'd be grateful for any feedback.
Thanks
Gareth

Hello Gareth
This question can give a lot of talk. And there is no right or wrong, as it depends mainly how your organization is structured.
Basically I would not split between DEV/QAS/PRD in terms of authorizations. My view is, that those from the business (eg. Head of Accounting) only get privileges on the UI. For example he can approve all requests, change users and such. All that has to do with DB, MMC and others, should be done by the basis guys. I know this is not always possible, but it would be good if one person could do all the tasks. This is good when you need to solve a problem, but can obviously also lead to other problems in security related issues.

Similar Messages

  • How do you transfer the data from your Ipad to a new pc?

    How do you transfer the data from your Ipad to a new pc?

    Sync with new computer
    http://discussions.apple.com/docs/DOC-3141

  • How do you get the answers to your security questions in order to buy an app on iphone?

    How do you get the answers to your security questions in order to purchase an app on iphone?

    You need to ask Apple to reset your security questions; ways of contacting them include clicking here and picking a method for your country, phoning AppleCare and asking for the Account Security team, and filling out and submitting this form.
    (99852)

  • How do you see the size of your library now in iTunes 11?

    On iTunes 10 when you were looking at your song list, at the bottom everyone has seen the small informative text that tells you how many days it would take to listen to the songs that you currently have on the screen. Where is that information now??
    How do you see the size of your library, or is there an option in iTunes 11 that will allow you to enable a way to see that text again at the bottom of your screen?

    In the menu bar, open "view", and click "show status bar"
    (Or the shortcut to toggle it is CTRL + / )

  • HT201269 how do you change the name of your device?

    How do you change the name on your device?

    Hi Sexxy21,
    Thanks for visiting Apple Support Communities.
    You can change the name of your iOS device using the steps in this article:
    iTunes and iOS: Change the name of your iPhone, iPad, or iPod
    http://support.apple.com/kb/ht3965
    All the best,
    Jeremy

  • How do you view the size of your Ibook library? How do you view how many books are in your library?

    How do you view the size of your Ibook library? How do you view how many books are in your library?

    Open the iBooks app. All your iBooks should load there.
    You can see the file size for each iBook by clicking List from the menu bar top of the iBooks window.
    message edited by:  cs

  • How do you change the name of your nano in the new itunes

    How do you change the name of your nano in the new itunes

    In iTunes I don't know but when you open your finder you can see it on the left and rename it there.

  • How do you send the email to your backup email to reset your security questions?

    how do you send the email to your backup email to reset your security questions?  i need help i cant buy any songs because i dont remmeber my security questions and i dont know how to make new ones? HELP!!  thanks

    Forgotten Security Questions / Answers...
    See Here > Apple ID: Contacting Apple for help with Apple ID account security
              Ask to speak with the Account Security Team...
    Or Email Here  >  Apple  Support  iTunes Store  Contact
    More Info >  Apple ID: All about Apple ID security questions
    Note:
    You can only set up and/or change a Rescue Email Before you forget the questions/answers.

  • How do you change the dates on your iphoto pictures?

    How do you change the dates on your iphoto pictures?

    You'd need an app that can edit EXIF data. You can't do that natively on an iPhone but there may be apps in the App Store that will let you do it. Take a look at Snapseed. I think it might.

  • How do you see the size of your hard drive

    I am new the the MAC world and I am trying to figure out some things.  How do you see the size remaining on your hardrive?

    If you have a folder open or dubble click on your hard drive you, can turn on the status bar which will show you available disc space:

  • HT1277 How do you change the "picture" on your e-mail header?

    How do you change the little picture that is on your e-mail header? Pretty basic, but I have no idea.

    You can change this in your listing in AddressBook.
    Bear in mind that the only person who ever sees it is you - it does not transfer to actual email messages.

  • How do you wipe the info from your old iPhone

    How do you wipe the info off of your old iPhone ?

    Before you erase your phone, you need to first delete the iCloud account, sign out of FaceTime & iMessage. If you don't, this phone will still be linked to your Apple ID. Once you do that: Settings>General>Reset>Erase All Content & Settings.
    But, delete iCloud & turn the other stuff off first...important you do this.

  • How do you see the contents of your "Domain" file?

    Thanks to this forum I have found out that the photo files on my Web site are stored in the Domain file under Application Support. How do you see the contents of this file? When I double-click on it, iWeb launches and I see the actual Web site.
    12" PowerBook   Mac OS X (10.4.8)   G4 1.5 GHz, 768 MB RAM

    i don't think it will work. because when you open up the domain file after you changed the size of the pictures, iWeb will probably save again while uploading - so the changes were for nothing. yet i haven't tried it.
    other way is to change them after you published. using graphic converter you just drag all at once in and change all the sizes at once.
    mp

  • How can you fix the volume on your iphone

    I just recieved my new Iphone 4S and I have the volume on the side of the phone turned up, but I can hardly hear anyone I am talking to

    First, YOU STOP SHOUTING.  It's considered rude, and many people will not respond to screamers.
    By wipe, do you mean erase all songs in the iPod app on your phone?  If so, you sych the phone to your computer and uncheck the sych music tab.  Your music will synch off your phone.
    Since this is a very basic function of the phone, I suggest you read the User Guide.  The link to the UG is below.
    http://manuals.info.apple.com/en_US/iphone_user_guide.pdf

  • How will you generate the work schedule in live system

    How will you generate the live system
    Appreciate for sppedy answer

    Your live system must be open for table changes if you want to generate your work schedule rules - this will need to be done by your basis team.
    Usually, work schedule rules are generated in development and transported through to production.  The generation is performed by using program RPTSHF00 (or transaction code OG00).  You generate as a batch with the 'BTCI = ''/online, ='A' or 'E'"field set to E.  This will save the generation to a transport.  If you have a lot of work schedule rules, you may need to split the generation over more than one transport.
    Regards

Maybe you are looking for

  • Creation of new field in RFX screen and populating item details

    Hi Experts, I have to create a new button in "Create RFX " screen where it should procure the shopping cart details and it should populate in table in RFX screen. Shopping cart number should be entered in this screen. Set up for this input field is a

  • How do you recover a hard drive?

    I have a MacBook Pro that is two years old. I tried to start the laptop and it hung up on the gray screen with the apple icon.  So I inserted the snow leopard install cd and I was able to start the computer and gain access the utilities. I tried the

  • Changing the Cursor Color

    Is anyone aware of a way to change the color of the cursor from black to a lighter color? White or a light gray would be ideal. I am working with a document that has a dark background that even shifts to black in certain areas. The problem is that I

  • Flash Player Video Performance issue in IE 9.0.124

    So everything was going fine until we got all users to update their player to the new 9.0.124 version. We host HD videos on our site and people love the quality we provide. Well at least until now. Videos started to stutter while download is still in

  • Chechbox header : deselect all not working

    folks, I have a jtable generated from my database. IT has 3 columns . The 3rd column has checkboxes in it. I am implementing a "CHECK ALL" checkbox on the header for selection and deselection of checkboxes. the below code works for selection of all b