Organization tree planning

  1. Obtain agreement on the primary and secondary requirements that a structure must satisfy.
  2. Clarify the degrees and levels of delegated administration for subsets of services or users and then specify admin domains that accomplish these goals.
  3. Use automated identity feeds to load identity records.
  4. Determine user access privileges with different degrees of scope within the branches of an organization.
  5. For organizations in different geographic areas, enable a flow of changing administrative access to the system for a specific region or time interval.
  6. Determine effective change control of policies, roles, groups, and other security functions that IBM Security Identity Manager provides.
  7. Determine the scope of influence within an organization tree for IBM Security Identity Manager policies and workflow participants, such as supervisors and administrators.
  8. Ease migration from pilot to production-level structures.

See:

Parent topic: Planning