Management of accounts on a service

An account is an entity that contains a set of parameters that define the application-specific attributes of a user, including the identity, user profile, and credentials.

An account defines your login information, such as your user ID and password, and your access to the specific resource with which it is associated.

In IBM Security Identity Manager, accounts are created on account types. The types represent the managed resources such as operating systems (such as UNIX), applications (for example, WebSphere Application Server), or other resources. An account type is defined as part of the service type for the managed resource. The account type contains the account profile object that describes the schema of an account and mapping of account attributes to IBM Security Identity Manager-managed account attributes.

Accounts are either active or inactive. Accounts must be active to log in to the system. An account becomes inactive when it is suspended or if a request to recertify your account usage is declined and the recertification action is suspend. Suspended accounts still exist, but they cannot be used to access the system.

If one of your accounts is inactive and you require access to the system, contact the system administrator to restore the account.

• Displaying accounts on a service
  
• Request accounts on a service
  
• Change accounts on a service
  
• Deleting accounts from a service
  
• Suspending accounts on a service
  
• Restoring accounts on a service
  
• Assign an account to a user
  
• Orphan accounts
  

Parent topic: Services administration