Creating groups

You can create groups either on the ITIM Service or on managed resources.

Before you begin

Depending on how your system administrator customized your system, you might not have access to this task. To obtain access to this task or to have someone complete it for you, contact your system administrator.

If a new group requires a new business unit, create the business unit first. To limit group activities, you might create an extra view or access control item after you create a group. You might create an access control item on the ITIM Service before creating a group. If the group does not previously exist, the access control item does not have the intended membership.

You might upgrade from IBM® Security Identity Manager version 5.0 to version 5.1 and use a service instance that was created with a IBM Security Identity Manager 5.0 profile. If so, you must upgrade to the 5.1 adapter before you create groups on the service.

About this task

You can use the Create Group wizard to create more groups.

Procedure

To create a group, complete these steps:

  1. From the navigation tree, click Manage Services.
    The Select a Service page is displayed.
  2. On the Select a Service page, complete these steps:
    1. Type information about the service in the Search information field.
    2. In the Search by field, specify whether to search against services or business units.
    3. Select a service type from the Search type list.
    4. Select a status from the Status list, and then click Search.
      A list of services that matches the search criteria is displayed.
      If the table contains multiple pages, you can:
      • Click the arrow to go to the next page.
      • Type the number of the page that you want to view and click Go.
  3. In the Create Group wizard, complete these steps:
    1. On the Select Type page, click the radio button next to the type of group that you want to create, and then click Next.
      The Select Type page is displayed only if the service supports more than one type of group.
    2. On the General Information page, complete the expected fields. Click Next to display the Access Information page, or click Finish to complete the operation without adding access information or any members to the group.
    3. Optional: On the Access Information page, select the Define an Access check box to activate the access definition fields. Click the radio button for the type of access you want to enable. Specify the expected access information and any other information such as access type, description, access owner, search terms, approval workflow, notification options, search terms, or badges. Click Next to display the Group Membership page, or click Finish to complete the operation without adding any members to the group.
    4. Optional: On the Group Membership page, add members to the group, and then click Next to display the Schedule Add Member Operation page.
    5. On the Schedule Add Member Operation page, specify when to add the members to the group, and then click Finish.
      The Schedule Add Member Operation page is displayed only if you chose to add members to the group on the Group Membership page.

Results

A page is displayed, indicating that the operation was successful. The new group is created on the service.

What to do next

You can create another group, add or remove members for the new group, or click Close to close the page.

If the new group is created on the ITIM Service, you can create an access control item to associate with this group.