Page Comparison

About Query-Based Collections

Query-Based Collections, also known as Set Groups, are logical bundles of Sets, which are queries made against the EmpowerID Identity Warehouse that return collections of Assignees (commonly people) or resources. Simply put, Set Groups or Query-Based Collections are sets grouped together with a friendly name for resource management.

Set Groups offer the following advantages:

Set Groups can contain any type of resources.
Set Groups are continuously evaluated to ensure they contain the appropriate resources.
Set Groups can be used both as actors (when containing a collection of people) and as resources to be delegated to EmpowerID actors, including other Set Groups.
Set Groups can be recipients of EmpowerID policies for provisioning, deprovisioning, attribute assignment, password policies, etc.

Membership within a Set Group is dynamic. Each compilation of the Set Compiler Job adds and removes objects from each Set Group based on the

query

results of the

Sets

Set queries belonging to those Set Groups. For example, if you have an "All Engineers in New York" Set Group and hire a new engineer in the New York location named "John," at the next compilation of the Set Compiler Job EmpowerID

adds

will add John to that Set Group because he will be returned as by the Set query. If John later relocates to Sydney,

EmpowerID removes his Person object from the Set Group

at the next compilation of the Set Compiler Job after his relocation

.

To create a Query-based Collection, you can follow the below steps:

On the navbar, expand Role Management and select Query-Based Collections (SetGroup).

On the Actions tab, click Create a Query-Based Collection (SetGroup).

Image Removed

, he will be removed from the Set Group because he is no longer returned by the Set.

Easy html macro

theme	{"label":"solarized_dark","value":"solarized_dark"}
contentByMode	{"html":"<article>\r\n <div class=\"cont\" style=\"margin:auto;float:none;\">\r\n

<h3>Query

<h3>About Query-Based Collections</h3>\r\n </div>\r\n <audio controls>\r\n <source src=\"https://docs.empowerid.com/assets/audio/

QueryBasedCollections

AboutQueryBasedCollections.wav\" type=\"audio/wav\">\r\n</audio>\r\

n <br/><span style=\"color:white

n</article>\r\n","javascript":"","css":"@import 'https://fonts.googleapis.com/css?family=Lato';\r\n\r\n\r\nbody {\r\n\t\r\n\tfont-family: 'Lato';\r\n}\r\n\r\narticle{\r\n\tbackground: #343436;\r\n\twidth: 80%;\r\n\ttext-align: center;\r\n\tpadding: 30px 5%;\r\n\tbox-sizing: border-box;\r\n\tbox-shadow: 0 0 21px 0px rgba(0,0,0,0.3);\r\n\tborder-radius: 10px;\r\n\tmargin-left: 40px;\r\n}\r\n\r\n.cont h3{\r\n\tfont-family: 'Lato';\r\n\tfont-size: 25px;\r\n\tmargin: 0 0 10px 0;\r\n\tcolor: #ccc;\r\n}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n}"}

Use Cases

Set Groups offer the following advantages:

Set Groups can contain any type of resources.
Set Groups are continuously evaluated to ensure they contain the appropriate resources.
Set Groups can be used both as actors (when containing a collection of assignees) and as resources to be delegated to EmpowerID actors, including other Set Groups.
Set Groups can be recipients of EmpowerID policies for provisioning, deprovisioning, attribute assignment, password policies, etc.

Easy html macro

theme	{"label":"solarized_dark","value":"solarized_dark"}
contentByMode	{"html":"<article>\r\n <div class=\"cont\" style=\"margin:auto;float:none;\">\r\n

Audio narrative explaining use cases

<h3>Use Cases for Query-Based

Collections.</span>

Collections</h3>\r\n </div>\r\n <audio controls>\r\n <source src=\"https://docs.empowerid.com/assets/audio/QueryBasedCollections.wav\" type=\"audio/wav\">\r\n</audio>\r\n</article>\r\n","javascript":"","css":"@import 'https://fonts.googleapis.com/css?family=Lato';\r\n\r\n\r\nbody {\r\n\t\r\n\tfont-family: 'Lato';\r\n}\r\n\r\narticle{\r\n\tbackground: #343436;\r\n\twidth:

100%

80%;\r\n\ttext-align: center;\r\n\tpadding: 30px 5%;\r\n\tbox-sizing: border-box;\r\n\tbox-shadow: 0 0 21px 0px rgba(0,0,0,0.3);\r\n\tborder-radius: 10px;\r\n\tmargin-left: 40px;\r\n}\r\n\r\n.cont h3{\r\n\tfont-family: 'Lato';\r\n\tfont-size: 25px;\r\n\tmargin: 0 0 10px 0;\r\n\tcolor: #ccc;\r\n}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n}"}

QueryBasedCollections.mp4

Info

Key Takeaways:

Query-Based Collections are logical bundles of Sets, which are queries made against the EmpowerID Identity Warehouse to return a collection of people or resources.
Query-Based Collections can provide greater flexibility for making access assignments in situations where those assignments cannot easily be made using other actors.
Query-Based Collections are also known as Set Groups.

Info

Versions Compared

Old Version 1

New Version Current

Key

About Query-Based Collections

Use Cases