{"id":21504,"date":"2021-03-24T22:18:31","date_gmt":"2021-03-24T21:18:31","guid":{"rendered":"https:\/\/staging.dev.firstattribute.com\/?page_id=21504"},"modified":"2021-08-17T08:59:55","modified_gmt":"2021-08-17T06:59:55","slug":"split-the-admin-load","status":"publish","type":"page","link":"https:\/\/www.firstattribute.com\/en\/iam-hybrid\/split-the-admin-load\/","title":{"rendered":"Split the Admin Load"},"content":{"rendered":"
[vc_row css_animation=”fadeIn” top_margin=”0″ bottom_margin=”0″ el_class=”FA-aligncenter”][vc_column][vc_column_text css_animation=”fadeInUp” el_class=”p”]\n

Split the Admin Load<\/h1>\n[\/vc_column_text][\/vc_column][vc_column width=”2\/3″ el_class=”FA-alignleft”][vc_column_text css_animation=”none”]\n

Duplicate systems, fewer tickets<\/h2>\n[\/vc_column_text][vc_column_text css_animation=”none” el_class=”FA-aligncenter”]\n

Employees generate twice the work for administration if they have accounts in two systems. In a hybrid Microsoft environment, these are user accounts in Active Directory and Azure AD<\/strong> (Microsoft 365). Employees don’t know about this, but IT specialists do. Some only want to use services, others receive tickets.<\/p>\n

The idea: It doesn’t matter how employees use the services, they should just use them. For IT and the helpdesk, however, there are not twice as many tickets.<\/strong><\/p>\n[\/vc_column_text][\/vc_column][vc_column width=”1\/3″]

<\/div><\/div>[vc_column_text css_animation=”bounceInRight” css=”.vc_custom_1616622890078{margin-top: 50px !important;}”]\n

\"Duplicate-systems-Split-the-admin-load<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css_animation=”fadeInUp” fullwidth=”yes” top_margin=”0″ background_color=”#eff5ff”][vc_column css=”.vc_custom_1587738490710{padding-bottom: 10px !important;}”][vc_column_text el_class=”pleft”]\n

Services on-premises and from the M365 cloud<\/h2>\n[\/vc_column_text][vc_column_text]\n

Services such as mail via Exchange Online, SharePoint, OneNote and FileServices on on-prem servers or OneDrive create a lot of work. Synchronization from Active Directory to Azure AD (AAD Connect) does little to change this. It ensures that a user account is only created once and that the identity exists on-premises and in the M365 cloud.<\/p>\n[\/vc_column_text][vc_column_text]\n

\"Multi-admin-centers-user-request-Split-the-admin-load\"<\/p>\n[\/vc_column_text][vc_column_text]\n

Keeping track of all systems and using the right admin console is also increasingly difficult. Some on-prem data<\/strong> is synchronized, while others are maintained in an M365 admin center. Some of these functions, in turn, are spread across several admin centers<\/b>. Some are missing altogether and are only accessible via PowerShell<\/strong>.<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css_animation=”fadeInUp” fullwidth=”yes” top_margin=”0″ css=”.vc_custom_1611934300655{margin-top: 20px !important;padding-bottom: 80px !important;}”][vc_column][vc_column_text el_class=”pleft” css=”.vc_custom_1615396811696{border-bottom-width: 2px !important;padding-bottom: 10px !important;}”]\n

IAM Delegation in Active Directory and Azure AD<\/h2>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css_animation=”fadeInUp” fullwidth=”yes” top_margin=”-80″ bottom_margin=”0″][vc_column][vc_column_text]\n

Split the admin load<\/strong> means less pressure on IT specialists.<\/strong> With more and more systems in place, IT and the helpdesk have to deal with ever more administrative tasks. Our idea is to use IDM-Portal to manage user accounts in at least two systems<\/strong> (AD, M365) instead of duplicating efforts. What sets this apart is that these can be hybrid, on-premise and cloud-based. In the Microsoft world, these are often Exchange, FileServices and Teams. The goal is to actually minimize the overall administration effort<\/strong>.<\/p>\n[\/vc_column_text][vc_column_text el_class=”FA-aligncenter”]\n

\"\"<\/a><\/p>\n[\/vc_column_text][vc_column_text el_class=”FA-aligncenter”]\n

Split the admin load for hybrid identity management works as follows:<\/strong><\/p>\n

    \n
  1. Standardization of common IAM tasks in AD, M365 and other systems<\/li>\n
  2. Automation of operations and implementation of compliance rules<\/li>\n
  3. Sharing administration DIRECTLY<\/strong> with users, HR or power users.<\/li>\n<\/ol>\n[\/vc_column_text][vc_column_text]\n