In EmpowerID, external roles and locations are roles and locations that exist in external systems. That information can be identified through the connector mappings of organizational information, such as job and location codes, etc. EmpowerID can inventory role and location hierarchies from external systems such as HR, SaaS applications, AD, or LDAP directories. These applications and directories may contain actual role and location structures or a structure can be built using connector logic based on user attributes such as title, department, and country. These "external roles" and "external locations" along with the assignment of user accounts to these are inventoried into the EmpowerID data modelBefore inventory occurs, you can configure EmpowerID to map these external roles and locations to EmpowerID roles and locations, ensuring that EmpowerID role and location assignments remain in sync with those given to users by an authoritative system, such as HR. These mappings, known as Business Role and Location mappings, allow existing external directory Locations and roles to be mapped to a logical management structure. For example, multiple AD or LDAP directory containers for “Offices” can be mapped to a single virtual “USA” Location for unified management and delegation.
For example, the below image shows some sample external locations in EmpowerID.
...
We can use a dynamic hierarchy policy to automatically generate external Business Roles and Locations based on the value of a specified person attribute, such as the name of their department. After the policy is created, the Dynamic Hierarchy engine will add any person with the matching attribute values to the Role and Location.
Info |
---|
Key Takeaways:
|
Easy html macro | ||||
---|---|---|---|---|
| ||||