Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

importhttps://docs.empowerid.com/docs.css

EmpowerID provides the capability for you to create Dynamic Hierarchy policies that allow groups to be dynamically generated based on the value of any two specified Person attributes, such as the State and City attributes. When the policy runs, EmpowerID creates a group for the specified attributes. EmpowerID then places any Person accounts with those matching attributes in the group.

...

Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <div class = \"bd-callout bd-callout-danger\">\r\n <p>The <b>Extension Attribute 1</b> value for each Management Role Definition and Management Role created by a Dynamic Hierarchy policy

...

is internally managed by EmpowerID and should not be altered.

...

</p>\r\n </div>","javascript":"","css":""}

Create a One-Level Dual Attribute Groups Dynamic Hierarchy Policy

...

  1. On the

...

  1. navbar, expand 

...

  1. Dynamic Hierarchies and select Policies.

...

  1. Click the Add (+) button.

...

  1. Image Added

...


  1. This opens the Policy Details form

...

Optionally, underneath Hierarchy Generation Schedule, click the Start and End fields and in the calendar control that appears for each field, specify the respective start and end dates for hierarchy generation to occur.

Info

The default start date is the current day and the end date is 97 years from the start date.

...

Optionally, underneath Membership Recalculation Schedule, click the Start and End fields and in the calendar control that appears for each field, specify the respective start and end dates for hierarchy generation to occur.

Info

The default values for these fields is a start schedule of one day before the current day and an end date of 97 years from the start date. If you change these values, set the Start date to one day before the date specified in the Membership Recalculate Next Run field to ensure the generation occurs as expected.

...

Select whether to Claim Matching Group

Info

If this option is selected and the group already exists in the specified OU, EmpowerID claims that group as a Dynamic Hierarchy group instead of creating a new one. If an existing group is claimed, EmpowerID fully manages the membership of that group, adding and removing users from those groups based on the criteria set for group membership.

You can add people to Dynamic Hierarchy groups using RBAC policies, but you cannot remove them.

Warning

When selecting this option, be aware that any people in the group who do not match the criteria for group membership are removed from that group, unless those people have been added to the group as an RBAC delegation.

...

Membership Change Alert - When Membership Change Alert Active is enabled (checked), this sends an alert when the membership of a group created by the policy is changed by the policy. By default, the alert is set to Hierarchy Group Membership Changed alert.

Info

EmpowerID includes default Alert email templates that are automatically selected for each type of Alert, but custom email alerts can be defined and selected as needed. To do so, click the Remove button to the right of the alert you wish to replace and then search for and select the appropriate alert. If you click the link for the alert rather than the Remove button, EmpowerID directs your browser to the View One page for the alert.

...

  1. .

    Image Added

     

  2. Fill out each section of the form according to your policy needs.

    Insert excerpt
    IL:Dynamic Hierarchies Form Fields
    IL:Dynamic Hierarchies Form Fields
    nameoneleveldualattributes
    nopaneltrue

  3. Click Save.

    Insert excerpt
    IL:External Stylesheet
    IL:External Stylesheet
    nopaneltrue

Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <p class = \"bd-callout bd-callout-info\">Once the Dynamic Hierarchy Policy runs, you are able to search for the groups provisioned by it. You can also view the Dynamic Hierarchy Membership Inbox and

...

Lifecycle Event Inbox by

...

Image Removed

Tip
You can view the people who have been dynamically added to the group by clicking on the Display Name link for that group and expanding the Resultant Members accordion on the View One page for the group that appears.
Info
iconfalse
titleRelated Content\r\n expanding <b>Dynamic Hierarchies</b> and selecting <b>Inbox</b> on the navbar.</p>","javascript":"","css":""}