在 Azure Active Directory 中分配工作区分析用户和组角色Assign Workplace Analytics user and group roles in Azure Active Directory

若要在 Azure Active Directory 中添加工作区分析用户角色 (Azure AD) :To add Workplace Analytics user roles in Azure Active Directory (Azure AD):

  1. 登录到租户的Azure Active Directory 管理中心Log in to your tenant's Azure Active Directory admin center.

  2. 在左侧导航菜单中,选择 "企业应用程序"。In the left navigation menu, select Enterprise Applications.

    企业应用程序

  3. 在 "应用程序类型" 下拉菜单中,选择 "所有应用程序",然后选择 "应用"。In the Application Type drop-down menu, select All Applications and select Apply.

    选择 "应用"

  4. 在搜索字段中,键入 "workplace",然后按enterIn the search field, type "workplace" and then press Enter.

  5. 在搜索结果中,选择 "工作区分析"。In the search results, select Workplace Analytics.

    所有应用程序

  6. 在 "概述" 部分,选择 "总用户数"。In the Overview section, select Total Users.

    用户总数

  7. 在 "用户和组" 窗口中,选择 "添加用户"。In the Users and groups window, select Add user.

    添加用户

  8. 在 "添加分配" 下,选择 "用户和组"。Under Add Assignment, select Users and groups.

  9. 在 "用户和组" 下的 "搜索" 字段中,键入要为其分配所需权限的用户的名称,然后按enterIn the search field under Users and Groups, type the name of the user to assign the required permissions and then press Enter. 用户名称将显示在搜索字段下。The user name will appear under the search field.

  10. 选择名称,然后选择 "蓝色选择" 按钮。Select the name and then select the blue Select button.

    选择用户

    用户和组确认已选择新用户。Users and groups confirms that the new user has been selected.

    添加分配

  11. 在 "添加分配" 下,选择 "选择角色" 以选择要分配给所选用户的角色。Under Add Assignment, select Select Role to choose the role you want to assign the selected user.

    选择角色

  12. 从显示的列表中,选择下列角色之一:From the list that appears, select one of the following roles:

    • 人员Analyst
    • 分析师 (受限访问) Analyst (Limited Access)
    • 管理员Administrator
    • 项目经理Program manager

    选择角色

  13. 选择 "选择" 按钮。Select the Select button.

  14. 选择 "分配" 按钮。Select the Assign button.

    分配角色

    用户和组现在将显示用户的新分配的工作区 Analytics 角色。Users and groups now displays the user's new assigned Workplace Analytics role.

    角色分配确认

  15. (可选) 添加其他角色:(Optional) Add additional roles:

  • 若要将另一个角色添加到_同一个_用户,请重复步骤11-14。To add another role to the same user, repeat steps 11-14.
  • 若要向_其他_用户添加角色,请重复步骤7-14。To add roles to other users, repeat steps 7-14.

允许在系统中保存更改的时间。Allow time for the changes to be saved in the system. 用户现在可以使用其新角色及其相应的访问权限登录到工作区分析The user can now log in to Workplace Analytics with their new role and its corresponding access permissions.

将角色分配给组Assign roles to groups

您还可以将角色分配给组,这意味着您要将与该角色相关联的访问权限分配给该组。You can also assign roles to groups, which means that you are assigning the access permissions associated with that role to the group. 分配给该组的任何用户都将自动成为该组的成员,并获得分配给该角色的相同权限。Any users who are assigned to that group then automatically become members of the group and receive the same permissions that are assigned to that role.

若要将用户和角色分配到工作区分析组,步骤与分配用户的步骤类似,如步骤9至14中的之前所述。To assign users and roles to Workplace Analytics groups, the steps are similar to those for assigning users, as previously described in steps 9 through 14. 在这一相同的过程中,在步骤9中添加用户的名称,同时也可以添加组并为其分配角色。In that same process, where you add the name of a user in step 9, at the same time, you can also add a group and assign it a role. 唯一的区别是,不使用用户名,而是替换组的名称,然后选择组并为其分配角色。The only difference is that instead of a user name, you substitute the name of your group, then select the group and assign a role to it.

选择组

如果尚未在 Azure AD 中创建工作区分析组,并希望执行此操作,请参阅在相关主题中创建组一文。If you have not yet created a Workplace Analytics group in Azure AD, and want to do so, see the article on creating a group in Related topics.

常见问题FAQ

何时将角色分配给组,而不是分配给单个用户?When would you assign a role to a group rather than to an individual user?

这取决于具体情况或公司的策略,但一般而言,在一种方法和另一种方法之间进行选择通常是效率的。It depends on the situation or on your company's policy, but generally speaking, the reason for choosing between one method and another is usually efficiency. 在较小的公司中,如果有少数用户将被分配到工作区分析角色,则单独分配用户角色可能会很方便,尤其是在不可能更改此类角色的情况下。In a smaller company, if a few people will be assigned Workplace Analytics roles, it can be convenient to assign user roles individually, especially if such roles are unlikely to change.

但是,在一个较大的公司中,相同角色所需的用户数量非常重要(例如,计划经理)时,将角色分配给组,然后将用户添加到组中会更高效,因为组更易于管理和审核。However, in a larger company where the number of users required for the same role is significant, for example, Program Managers, it is more efficient to assign a role to a group, and then add users to the group, because groups are easier to manage and audit.