ServiceControl Trial User Guide

Transcription

1 ServiceControl Trial User Guide ServiceControl is a simpler way for busy network and IT administrators to delegate identity management and account creation tasks to frontline staff - without having to train them on multiple account management tools that are complex and often require full administration rights and security permissions. Issued October 2015

2 User Guide Topics Contents ServiceControl Login Screen... 3 ServiceControl Login Screen:... 3 ServiceControl Create Module... 4 ServiceControl Manage is the most popular ServiceControl module Reset Active Directory Passwords:... 4 Active Directory and Exchange Management Options... 5 Disable Active Directory Accounts... 5 Manage Active Directory Group Membership... 5 Manage Active Directory Values and Extended Schema Attributes:... 6 ServiceControl Create Module... 8 ServiceControl Create is the second most popular ServiceControl module... 8 ServiceControl Create Profiles:... 8 ServiceControl Self-service Module Self-service Login: Personal Demographic Information: Password Self-service: Update Challenge Responses: ServiceControl Administration Manage Administration Section Define Task Collections: Active Directory Task Collections: Assign Task Collections to Groups: Manage Identification Forms: Create Administration Section Manage ServiceControl Create Field Collections: Preview ServiceControl Create Form: Create Profile Options: Manage Self-service Module Page 2

3 ServiceControl Login Screen ServiceControl Login Screen: Your non-technical staff junior administrators, help desk operators, teachers, department managers can login to ServiceControl from any browser on any computer to carry out user management tasks. If you have a distributed environment and want to implement delegated account management, users can quickly and easily login and carry out the tasks you have assigned them. Users will only see the users, groups, systems, and distribution lists that you want them to manage. If you have enabled ServiceControl Self-Service, users can click the "Forgot Your Password" link, answer the challenge phrase(s), and update their password without having to call your help desk. Page 3

4 ServiceControl Create Module ServiceControl Manage is the most popular ServiceControl module. Manage delivers delegated, role-based management of Novell GroupWise, edirectory, Microsoft Active Directory and Exchange 2007 and 2003 accounts, groups and distribution lists/groups from a single browser and NO administrator or supervisor rights and NO access to ConsoleOne, imanager, Microsoft Management Console or Task Pads. Figure 1: Manage Active Directory Users Reset Active Directory Passwords: Empower your front-line staff to change users' Active Directory passwords. Enforce strong password requirements with ServiceControl. Page 4

5 Active Directory and Exchange Management Options: ServiceControl can be used to manage Microsoft-only, Novell-only or mixed and multiple Active Directory, Exchange, edirectory and GroupWise environments from a single browser. Search for users, security groups and distribution groups. Then right-click the account or group to view the management tasks you can carry out. Remember, as the ServiceControl administrator, you have full control over the tasks you wish to assign to members of Active Directory groups and the search contexts in which they can carry out those tasks. Disable Active Directory Accounts: Quickly and easily enable and disable Active Directory accounts. When provisioning Active Directory and Exchange accounts, administrators have the option to set the account as disabled until the department manager enables the account. This can be useful for temporary or contract staff. Manage Active Directory Group Membership: Add or remove multiple users from Active Directory groups by shift- or control-clicking the desired accounts. Administrators have full control over the Active Directory groups that are available to be managed in ServiceControl. Page 5

6 Manage Active Directory Values and Extended Schema Attributes: Clerical or nontechnical support staff can use ServiceControl to manage Active Directory values for users. Need to manage extended schema attributes like student IDs or SAP IDs? ServiceControl makes this quick and easy compared to managing these values in Microsoft Management Console or Task Pads. Page 6

7 Page 7

8 ServiceControl Create Module ServiceControl Create is the second most popular ServiceControl module. It delivers delegated, account and group provisioning for Novell GroupWise, edirectory, Microsoft Active Directory and Exchange 2007 and ServiceControl Create standardizes and simplifies user provisioning processes and ensures accounts are unique even across large, multi-tree and multi-forest environments. ServiceControl Create Profiles: Administrators create edirectory or Active Directory templates and make them available in ServiceControl so support staff can provision accounts quickly and easily by filling in a user's first and last name and a temporary password. Behind the scenes, ServiceControl creates the account, directory account, home directory, and all of the associated group memberships, volume restrictions, access to network drives and so on. ServiceControl Create Form: Support staff simply enter the user's first name, last name and a temporary password. A prompt enforces strong passwords by displaying a green bar after the appropriate number of characters have been entered. Page 8

9 Confirmation Screen: Notice that the username and display name were automatically created based on naming policies. In this case, we see that the organization has a policy set that creates accounts based on the first two characters of the user's first name and full last name. Administrators have full control over the naming convention that is enforced. Page 9

10 Success: This screen confirms that the Active Directory and Exchange accounts were provisioned successfully. If an error occurs, ServiceControl will provide suggestions on how to fix the issue or ask the user to contact the ServiceControl Administrator. Page 10

11 ServiceControl Self-service Module ServiceControl Self-service provides "forgot-my-password" functionality and enables end-users to update personal information and subscribe or unsubscribe themselves from public distribution lists. Self-service Login: Administrators can enable end-users to update certain demographic information in edirectory or Active Directory (e.g., cell phone numbers, licence plate numbers or other contact details). If users forget their password, they simply need to click the "Forgot Your Password" link next to the login button and answer the challenge response phrases they have answered in the Self-service module. Personal Demographic Information: In this screen shot, the end-user has the ability to update her preferred name, department, title, and contact details. The links at the top of the page allow users to update the responses to change their password and/or update the responses to their password challenge phrases Page 11

12 Page 12

13 Password Self-service: Users enter their new password. If strong password requirements need to met, the appropriate prompts will appear and a green bar will show that the password is compliant with the strong password policy. Page 13

14 Update Challenge Responses: Administrators configure the challenge questions that users need to reply to in order to update their passwords. Administrators have full control over the questions that appear and how many need to be answered correctly for passwords to be changed. Page 14

15 ServiceControl Administration The ServiceControl Administration has been completely re-architected. It is now completely web-based, more intuitive, and allows to rapidly customize and extend the framework to accommodate feature enhancements and future development. ServiceControl now leverages 's Riva connectors to connect to GroupWise, Active Directory, Active Directory, Exchange 2007 and 2003, OpenLDAP* and Lotus Notes* (future versions). Manage Administration Section Define Task Collections: The first step to deploying ServiceControl is to make sure that all the System Requirements have been met. Next, you will set up the connections to your destination systems. Then you are ready to login to the ServiceControl's web-based administration interface to configure each module. In this first step, you configure the Page 15

16 task collections that are available to be assigned to groups who have been tasked with carrying out delegated management tasks. Active Directory Task Collections: Here, we see an "All Tasks" task collection has been created. If we click on each of the management options (the ones above in the Manage drop-down menu screen shots), we'll see that all of the tasks have been enabled. Page 16

17 Assign Task Collections to Groups: In ServiceControl (or the standard Novell and Microsoft administration tools), you add the group(s) to which you want to assign a task collection. The tasks in that collection can then be carried out by any member of the Active Direcotry or edirectory group. You assign a "search authority" to the task to restrict against which users the tasks can be applied. For example, we see the name of the Tree (-tree), the location of the new group (associated LDAP information), we select the task collection from the drop-down. By clicking the "Search Context" link, you identify which container or group of users can be managed. Page 17

18 Manage Identification Forms: This is where administrators configure the Active Directory and edirectory demographic information pages. You choose which fields will be visible, which can be edited, which are required and whether multiple rows are required (e.g., address fields, multiple surnames in Latin American countries). You can also provide a certain measure of localization by updating the default English field values. Page 18

19 Create Administration Section Manage ServiceControl Create Field Collections: By clicking on the "Create" tab, administrators can click the "Manage Create Forms" button to configure the fields in the forms used to provision accounts. Add the form to the drop-down menu, right-click the tree nodes to view the options and configure the fields. Page 19

20 Preview ServiceControl Create Form: From the administration back-end, administrators can preview Create Forms by clicking the "Preview Form" button. Page 20

21 Create Profile Options: In the "Profiles" section, administrators define where the user create profile is located, where users accounts get created, which help desk operators are able to provision accounts, and which templates are available to them. Page 21

22 Page 22

23 Manage Self-service Module: By clicking the "Self-service" tab, administrators can enable password self-service and define which users will have access to this (e.g., limiting password self-service only to staff in K-12 environments instead of students). Administrators also define which challenge-response questions will be used and the number that need to be answered correctly for end-users to change their password. In this section the challenge questions for forgot Password can be set. Page 23

24 ServiceControl has offices, development and support centers worldwide, including sites in: Headquarters 103, Street Edmonton, Alberta T5J 1N4 Canada com Phone: Fax: Regional Offices ServiceControl Europe Kreitstrasse Greifenberg/Munich Germany Phone: emea@servicecontrol.com ServiceControl Latin America Providencia 2640 Oficina 703, Providencia Santiago, Chile Phone: chile@servicecontrol.com For the most up-to-date contact information for all ServiceControl offices worldwide, please visit our website at Proprietary and Confidential Information of Amdocs Page 20