Page Comparison

...

On the navbar of the EmpowerID Web interface, expand Identity Administration and click Groups.
From the All Groups tab, search for the group for which you want to add eligibility.
Click the Logon Name link for the group.
On the Group Details page that appears, select the Advanced tab and then click the Eligibility sub-tab near the bottom of the page. You should see four eligibility rules.

Eligibility rules:
- Resources Members Eligible to Request (As Actor) – Allows you to specify the resources that members of the group are eligible to request from the IT Shop.
- Resources Members May Not Request (As Actor) – Allows you to specify the resources that members of the group are excluded from requesting. Resources added here will not be visible to any members of the group, even if they are eligible to request those resources by virtue of another assignment.
- Who is Eligible to Request (As Resource) – Allows you to specify the actors eligible to shop for access to the group, as well as the eligibility type for each of those actors.
- Who is Excluded from Requesting (As Resource) – Allows you to specify the actors not eligible to shop for access to the group.
Expand the accordion corresponding to the type of eligibility you want to assign or restrict and follow the steps outlined for that eligibility rule.

...

Insert excerpt

	IL:External Stylesheet
	IL:External Stylesheet
nopanel	true

Add Click the Add .

Image Removed

Fill

Assignment Type – Select Direct or Location.

Eligibility Type – Select Eligible, PreApproved or Suggested.

Resource Type – Management Role Enter a <Resource Type> Name to Search – Search Management Role resource typeAfter Save.

Image Removed

Repeat

When Submit

Image Removed

Easy html macro

theme

{"label":"solarized_dark","value":"solarized_dark"}

contentByMode

{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n<div class =\"bd-example\">\r\n<div class=\"accordion\" id=\"accordionExample\">\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingOne\">\r\n <button class=\"accordion-button\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseOne\" aria-expanded=\"true\" aria-controls=\"collapseOne\">\r\n Resources Members Eligible to Request (As Actor)

\r\n </button>\r\n </h2>\r\n <div id=\"collapseOne\" class=\"accordion-collapse collapse show\" aria-labelledby=\"headingOne\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <p>Add this rule when you want to give members of the group the ability to shop for access to the resources you add here.

</p>\r\n <ol>\r\n <li>Click the <b>Add</b> button in the grid header

.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibility-resourcesmemberseligibletorequestasactor-addnewbtn.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Fill in the fields of the Assignment Information pane:

\r\n <ul>\r\n <li><b>Assignment Type</b> – Select <b>Direct</b> or <b>Location</b>.</li>\r\n <li><b>Eligibility Type</b> – Select <b>Eligible</b>, <b>PreApproved</b>, or <b>Suggested</b>.</li>\r\n <li><b>Resource Type</b> – Search for and select the type of resource corresponding to the resource for which you are granting eligibility. For example, if you want to grant eligibility for a specific Management Role, you select

<em>Management Role</em> as the resource type.

</li>\r\n <li><b>Enter a &LeftAngleBracket;Resource Type&RightAngleBracket;Name to Search</b> – for and select the specific resource to which members of the group are eligible to request. The resource must match the resource type or it will not appear when searching. For example, if you select

<em>Management Role</em> as the

<em>resource type</em>, you can only search for Management Roles.

</li>\r\n </ul>\r\n <li>After entering your information, click

<b>Save</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-AssignmentPaneSubmit-Group.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Repeat steps 2 and 3 to add other eligibility assignments as needed.

</li>\r\n <li>When ready, close the Assignment Information pane and click

Expand

...

Add even eligibility.Click the Add .

Image Removed

Fill

Mode – Select Direct or Location.

Eligibility Type – Select Eligible, PreApproved or Suggested.

Resource Type – Group Enter a <Resource Type> Name to Search – Search Group resource typeAfter Save.

Image Removed

Repeat

When Submit

Image Removed

Expand

title

<b>Submit</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibilityassignmentssubmit.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n </ol>\r\n </div>\r\n </div>\r\n </div>\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingTwo\">\r\n <button class=\"accordion-button collapsed\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseTwo\" aria-expanded=\"false\" aria-controls=\"collapseTwo\">\r\n Resources Members May Not Request (As Actor)

\r\n </button>\r\n </h2>\r\n <div id=\"collapseTwo\" class=\"accordion-collapse collapse\" aria-labelledby=\"headingTwo\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <p>Add this rule when you want to explicitly restrict members of the group from having access to certain resources. Keep in mind that users restricted from resources will not be able to request those resources

<em>even if they have another assignment that that grants them

eligibility</em>.</p>\r\n <ol>\r\n <li>Click the <b>Add</b> button in the grid header

.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-ResourcesMembersMayNotRequest-AsActor.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Fill in the fields of the Assignment Information pane:

\r\n <ul>\r\n <li><b>Mode</b> – Select <b>Direct</b> or <b>Location</b>.</li>\r\n <li><b>Eligibility Type</b> – Select <b>Eligible</b>, <b>PreApproved</b>, or <b>Suggested</b>.</li>\r\n <li><b>Resource Type</b> – Search for and select the type of resource corresponding to the resource for which you are granting eligibility. For example, if you want to grant eligibility for a specific group, you select

<em>Group</em> as the resource type.

</li>\r\n <li><b>Enter a &LeftAngleBracket;Resource Type&RightAngleBracket;Name to Search</b> – for and select the specific resource to which members of the group are eligible to request. The resource must match the resource type or it will not appear when searching. For example, if you select

<em>Group</em> as the

<em>resource type</em>, you can only search for groups.

</li>\r\n </ul>\r\n <li>After entering your information, click

<b>Save</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-AssignmentPaneSubmit-Group.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Repeat steps 2 and 3 to add other eligibility assignments as needed.

</li>\r\n <li>When ready, close the Assignment Information pane and click

...

Add Click the Add .

Image Removed

Fill

Eligibility Type – Select Eligible, PreApproved or Suggested.

Which Policy – EmpowerID actor type Group assignee type.Select <Assignee> Name to Search – Search Group After Save.

Image Removed

Repeat

When Submit

Image RemovedAdd specific users from being able to view or request access to the group from the IT Shop the group eligible for it even eligibility assignment for the Role and Location.Click the Add

Image Removed

Fill

Eligibility Type – Select Eligible, PreApproved or Suggested.

Which Policy – EmpowerID actor type restricting restrict from Group assignee type.Select <Assignee> Name to Search – Search restricted from being Group After Save.

Image Removed

Repeat

restrictions When Submit

Image Removed

title

<b>Submit</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibilityassignmentssubmit.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n </ol>\r\n </div>\r\n </div>\r\n </div>\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingThree\">\r\n <button class=\"accordion-button collapsed\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseThree\" aria-expanded=\"false\" aria-controls=\"collapseThree\">\r\n Who is Eligible to Request (As Resource)

\r\n </button>\r\n </h2>\r\n <div id=\"collapseThree\" class=\"accordion-collapse collapse\" aria-labelledby=\"headingThree\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <p>Add this rule when you want to give users the ability to shop for membership in the group from the IT Shop.

</p>\r\n <ol>\r\n <li>Click the <b>Add</b> button in the grid header

.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-WhoIsEligibleToRequestAsResource-NewBtn.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Fill in the fields of the Assignment Information pane:

\r\n <ul>\r\n <li><b>Mode</b> – Select <b>Direct</b> or <b>Location</b>.</li>\r\n <li><b>Eligibility Type</b> – Select <b>Eligible</b>, <b>PreApproved</b>, or <b>Suggested</b>.</li>\r\n <li><b>Which Type of Assignee for this

Policy</b> – Search for and select the

type of resource corresponding to the resource for which you are granting eligibility. For example, if you want to grant all members of a specific group eligibility, you select

<em>Group</em> as the

resource type.</li>\r\n <li><b>Select &LeftAngleBracket;Resource Type&RightAngleBracket; Name to Search</b> – Search for and select the specific assignee eligible for access to the group. The assignee must match the assignee type or it will not appear when searching. For example, if you select

<em>Group</em> as the assignee type, you can only search for groups.

</li>\r\n </ul>\r\n <li>After entering your information, click

<b>Save</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-AssignmentPaneSubmit-Group.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Repeat steps 2 and 3 to add other eligibility assignments as needed.

</li>\r\n <li>When ready, close the Assignment Information pane and click

Expand

title

<b>Submit</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibilityassignmentssubmit.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n </ol>\r\n </div>\r\n </div>\r\n </div>\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingFour\">\r\n <button class=\"accordion-button collapsed\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseFour\" aria-expanded=\"false\" aria-controls=\"collapseFour\">\r\n Who is Excluded from Requesting (As Resource)

\r\n </button>\r\n </h2>\r\n <div id=\"collapseFour\" class=\"accordion-collapse collapse\" aria-labelledby=\"headingFour\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <p>Add this rule when you want to explicitly restrict

members of the group from having access to certain resources. Keep in mind that users restricted from

resources will not be

able to request those resources <em>even if they have another

assignment that that grants them eligibility</em>.</p>\r\n <ol>\r\n <li>Click the <b>Add</b> button in the grid header.

</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-WhoIsExcludedFromRequestingAsResource-AddNewBtn.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Fill in the fields of the Assignment Information pane:

\r\n <ul>\r\n <li><b>Mode</b> – Select <b>Direct</b> or <b>Location</b>.</li>\r\n <li><b>Eligibility Type</b> – Select <b>Eligible</b>, <b>PreApproved</b>, or <b>Suggested</b>.</li>\r\n <li><b>Which Type of Assignee for this

Policy</b> – Search for and select the

type of resource corresponding to the resource for which you are

granting eligibility. For example, if you want to

grant all members of a specific group

eligibility, you select

<em>Group</em> as the

resource type.</li>\r\n <li><b>Select &LeftAngleBracket;Resource Type&RightAngleBracket; Name to Search</b> – Search for and select the specific assignee

eligible for access to the group. The assignee must match the assignee type or it will not appear when searching. For example, if you select

<em>Group</em> as the assignee type, you can only search for groups.

</li>\r\n </ul>\r\n <li>After entering your information, click

<b>Save</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-AssignmentPaneSubmit-Group.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Repeat steps 2 and 3 to add other eligibility

assignments as needed.

</li>\r\n <li>When ready, close the Assignment Information pane and click

<b>Submit</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibilityassignmentssubmit.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n </ol>\r\n </div>\r\n </div>\r\n </div> \r\n </div>\r\n </div>\r\n ","javascript":"","css":""}

Remove Eligibility

On the navbar, expand Identity Administration and click Groups.
From the All Groups tab, search for the group for which you want to remove eligibility.
Click the Logon Name link for the group.
On the Group Details page that appears, select the Advanced tab and then click the Eligibility sub-tab near the bottom of the page.
Expand the accordion that corresponds to the eligibility assignment you want to remove.
Click the trash can icon beside the assignment you wish to remove.
Click Submit.

...

Versions Compared

Old Version 3

New Version 4

Key

Remove Eligibility