Partitioning IBM Connections Cloud Administration
2 likes1,566 views
1. The document discusses partitioning users in IBM Connections Cloud which allows dividing users into logical groups called partitions that can each be managed by a user administrator. 2. A user administrator can only see and manage users within their assigned partitions, as defined by the organization administrator. 3. The document provides examples of how partitions can be organized based on attributes like location, department, or user group and outlines the capabilities of user administrators versus organization administrators.
Partitioning IBM Connections Cloud Administration
- 1. Partitioning your office in IBM Connections Cloud ibmcloud.com/social ibm.com/verse V 1.3 – february 2017 linkedin.com/in/teeuwe m8ui Tutorial 1 of 2
- 2. You had one or more Administrators to manage your subscribers - The ‘Organization Administrator’. He also had the possibility to assign people to reset passwords - The ‘Administrative Assistants’. Previously AA OA OA AAAA Organization
- 3. You keep your Organization Administrators & Admin. Assistants. But the additional role of “User Administrator” that can manage a subset of Users and perform a subset of Administrator functions, is available. Users can be organized into a logical group called a User Partition. The User Administrator can only see and act upon users within their assigned Partition(s). These partition(s) are defined & assigned by the Organization Administrator. With Partitioning AAOA AA OA UA
- 4. OA UA Headquarters Subsidiary A Subsidiary B Subsidiary C UA UA Example Partitioning | location based UA Partition A ‘Rotterdam’ Partition B ‘New York’ Partition C ‘Sydney’ AA AA
- 5. THIS USER ADMINISTRATOR CAN MANAGE PARTITIONS A + B OA UA Headquarters User Group A User Group B User Group C AA UA UA Example Partitioning 2 | Organization based UA Partition A ‘Sales’ Partition B ‘Logistics’ Partition C ‘Procurement’ AA UA
- 6. Org Administrator view of all User Accounts UA OA
- 7. vs Organizational Administrator User Administrator Administrator Assistant See all the users Only sees users from the partitions to be managed Only sees users from the partitions to be managed See a list of all the user partitions Only see user partition list to be managed Only see user partition list to be managed Navigator Bar showing all the options Navigator simplified to only 3 entries – UA’s own record, User Accounts & SCN Admin Navigator simplified to only 2 entries – AA’s own record & User Accounts (all partitions) All capabilities Limited options shown Applicable to this partition(s) only Can only reset passwords for Connections Cloud (no SCN resets) AAOA UA vs
- 8. 1 2 3 4 5 ✓
- 9. 1 2 3 4 5 AdminUI Integration Server Domino Directory (SCN HY) Step can be performed via the integration server or IBM Domino5 Steps and can be performed via the integration and/or the AdminUI3 4
- 12. 3 3b Click Create Partitions create 3c Click OK and Wait
- 13. ✔ A B C D
- 15. Connections Cloud record attributes: City Country Job Title Language Role Zip Code Time Zone For SmartCloud Notes HYBRID setups Domino Directory Person document attributes: Department Domain Organizational Unit (OU) OR What elements can you use in a partitioning rule? When user account directory attributes do not comply with the partition values, then the user is assigned into a ‘Default’ partition.
- 16. Connections Cloud City Country Job Title Language Role Zip Code Time Zone Domino Directory Person document Department Domain Organizational Unit (OU) Examples of Partitioning – Choosing a Rule that applies to the entire organization SCN HYBRID ONLY SCN SERVICE ONLY
- 17. Connections Cloud Profile City Country Job Title Language Role Time Zone Zip Code Domino Directory Person document: Department Domain Organizational Unit (OU) Examples of Partitioning – Choosing a Rule that applies to the entire organization Opposite to the Domino Directory UI there is no interface to show actual values of these Connections Cloud fields! JobTitle, Language and Timezone are attributes of the person entity associated with the Subscriber Role is the role you have in the UI so that can be seen (User, User Administrator, Admin Asisstant etc etc)
- 18. Connections Cloud City Country Job Title Language Role Zip Code Time Zone Domino Directory Person document Department Domain Organizational Unit (OU) Examples of Partitioning – Choosing a Rule that applies to the entire organization Remember that you can even combine these! Partition Name Partition Value United States New York, Boston, Chicago Europe Paris, Dublin, Rome Asia Tokyo, Beijing, Mumbai Simple - Single Partition Name Partition Value United States US|New York, US|Boston, US|Chicago Europe EU|Paris,EU|Dublin, EU|Amsterdam Asia AP|Tokyo, AP|Beijing, AP|Mumbai Advanced - Multiple Partition Name Partition Value East EU Sales SalesDom|HungarySalesDept, SalesDom|PolandSalesDept West EU Sales SalesDom|GermanySalesDept, SalesDom|FranceSalesDept All Executives AcmeDom|AllExecDept, GlobexDom|ExecDept, WillcoDom|DirectorsDept
- 19. Key Component Details Partitions Departments or Segments – Logical partitioning of the User Directory Rule Combination of User Attribute Fields (1 or more) used to define logical partitioning e.g. Customer uses Organizational Unit Partitioning Table Table with a list of possible values from user records & the partition those fall into User Administrator New Role – Administrator who can manage 1 or more partitions Definitions Planning: The Organizational Administrator plans and defines: - how to partition the users (which attributes to use) - number of partitions - Partition table - Administrator(s) to assign to each partition
- 21. UA AAOA PartitionsNOTE: You cannot move straight from Administrator to User Administrator or vice versa. You need To remove the role, complete it, and then add the new role to the user/admin. 4 Two steps: a. Remove previous OA role b. Assign UA role Or, if no Admin role….. a single step to tick mark User Admin role.
- 22. Org Administrator view of all User Accounts Partition info for each user Filter to see users from a single partitionClicking on the ‘i’ shows the partitions managed by this User Admin
- 23. User Administrator options Navigator Bar only showing User Accounts SCN Admin options User Accounts are available like with any other Admin NOTE: A User Admin does not have any capabilities to set the org wide configurations settings. UA
- 24. Can only work with users from his assigned partitions UAUser Administrator options, User Accounts
- 25. Can select the appropriate partition but not what he is not assigned to manage UAUser Administrator options, User Accounts
- 26. UAUser Administration, User Accounts vsOA UA User Administrator OA Organization Administrator
- 27. Manage SCN subscribers UAUser Administrator options, User Accounts No access to configuration options
- 28. UAUser Administration, User Accounts vsOA UA OA SCN users
- 29. UAUser Administration, User Accounts vsOA UA OA Deleted SCN users No batch request Deleted User in his specific partition(s)
- 30. Manage SCN subscribers in his own partition(s) only UAUser Administrator options, User Accounts
- 31. Bulk Administration of partitions You can create as many as 200partitions Each csv has a line maximum of 200 lines Integration Server https://apps.ce.collabserv.com/ei/files/ ftp.ap.collabserv.com ftp.ce.collabserv.com ftp.na.collabserv.com
- 32. emailAddress,action,givenName,familyName,name,keys ,addpartition,,,Test Accounts,Test Accounts ,addpartition,,,Location EU,London|England ,addpartition,,,Location AP,Tokyo|Japan 200081546_Maurice_PRV_0000000042.csv ✔
- 33. emailAddress,action,givenName,familyName,name,keys ,addpartition,,,Den Haag,"Scheveningen|NL,Leidschenveen|NL,Nootdorp|NL", ,addpartition,,,London,"Southbank|England,Upper Ground|England", ,addpartition,,,Amsterdam,"Sloten|NL,Diemen|NL,Oud Zuid|NL", 200081546_Maurice_PRV_0000000044.csv Yes, there can be multiple values! ✔
- 34. emailAddress,action,name andy.yiu@silvergreen.eu,AssignAdminToPartition,Stock Accounts andy.yiu@silvergreen.eu,AssignAdminToPartition,"Den Haag" ed.manilla@silvergreen.eu,AssignAdminToPartition,"Stock Accounts" ed.manilla@silvergreen.eu,AssignAdminToPartition,Test Accounts ed.manilla@silvergreen.eu,AssignAdminToPartition,London ed.manilla@silvergreen.eu,AssignAdminToPartition,Amsterdam 200081546_Maurice_PRV_0000000047.csv ✔
- 35. ✔ emailAddress,action,name ed.manilla@silvergreen.eu,DeleteAdminFromPartition,Stock Accounts ed.manilla@silvergreen.eu,DeleteAdminFromPartition,Test Accounts ed.manilla@silvergreen.eu,DeleteAdminFromPartition,London ed.manilla@silvergreen.eu,DeleteAdminFromPartition,Amsterdam ed.manilla@silvergreen.eu,DeleteAdminFromPartition,IBM Staff Note the missing for no partitions managed
- 36. Note! Partitioning is available for those that need to divide admin work. You do NOT HAVE TO set it up if you do not need it! Partition when one Administrator should not be allowed to perform admin tasks on users that do not belong to his partition(s). When you have not marked a user with a partition value it will always have the partition default. Which means there is always an Admin that can manage it… Renaming a partition is not possible. You would need to remove and the add a partition. As data removal is required in the background. Partition when an Administrator should not be allowed to perform Organization or security settings 1 2 3 4 5
- 37. AA OA UA Within the presentation we have covered: Partitioning allows customers to divide their users into smaller groups and assign an administrator for each group. The administrator for each group will have a new role, "User Admin". The User Admin is able to only see and manage users from their own department / partition of the org, and they would not be able to view or manage the rest of the users in the org Applies to both SmartCloud Notes Service-Only and Hybrid organizations Both manual and bulk activities For more information: https://www.ibm.com/support/knowledgecenter/SSL3JX/whatsn ew_2017_02/partitions.html https://www.ibm.com/support/knowledgecenter/SSL3JX/admin/ bss/topics/c_using_partitions.html
- 38. DEMO