Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Job

Purpose of Job

Inventory Job

  • Inventories all users, groups and group

membership
  • memberships

  • Azure specific data for RBAC and licensing

are
  • is stored in the AzureJSONInbox table of the Identity Warehouse for processing later

Resource System Inbox Inventory

Inbox JobClaims

Processor

This job claims and processes all the

entries for a tenant that exists

data contained in the AzureJSONInbox table

. It moves this inventoried data into the relevant Azure and licensing tables.It moves

in EmpowerID. This table is populated during inventory and stores inventoried information for all Azure-specific information such as license subscriptions, RBAC entities such as management groups, and information about license assignments. The job has two steps:

  • It processes the JSON docs into a set of tables prefixed as Azure_.

    1. The first step performed by the Inventory Inbox job is to process the JSON documents received during inventory and insert them into a series of tables in the Identity Warehouse, prefixed with Azure. Examples of these tables include Azure_Subscription, Azure_AccountLicense, Azure_GroupLicense and Azure_ManagedIdentity.

    2. The second step performed by the Inventory Inbox job is to move the data from the Azure

    _tables into the appropriate EmpowerID tables for display in the ALM user interfaces.

    License Pool Compiler

    Processes License Fulfillment Queue (Inbox) changes by adding or removing account from license groups in Azure AD
    1. tables to their corresponding EmpowerID tables. These tables, such as the Account and Group tables, are visible in the user interface to provide reporting, delegated administration and self-service.

    License Pool Compiler

    This job processes each enabled license pool based on the schedule set for that license pool. It evaluates the assignments and the exclusions and compiles the resultant assignments of who should have that license bundle. This then results in creating entries in the license fulfillment queue,  also known as the license inbox, to add or remove user accounts from Azure AD license groups that are mapped to each license bundle. It calculates the result of who should have that license bundle versus who is currently in that license group because of the license bundle and puts entries in the license fulfillment queue for who should be added to and who should be removed from a particular license bundle.

    License Pool Approval Change Inbox Processor Job

    This job reads the entries placed in the license fulfillment queue by the License Pool Compiler and connects to the SCIM microservice to process those entries in your tenants, adding or removing users to and from license groups.

    License Reclamation Compiler

    This job rrocesses license reclamation and creates inbox entries for licenses that are not in use or assigned to an invalid account.

    License Reclamation Inbox Processor

    This job processes License Reclamation Inbox entries and either executes them or generates workflows for approval.

    Insert excerpt
    IL:External Stylesheet
    IL:External Stylesheet
    nopaneltrue

    ...