...
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
Create SQL Sets
SQL Sets are SQL queries that return a collection of resource objects from the EmpowerID Identity Warehouse, such as all people who have been hired in the last week. You can add these Sets to Query-Based Collections (SetGroups) and use them to make dynamic RBAC delegation assignments. [Read More]
Create Code-Based Sets
Code-based Sets are queries that can result in collections of people or collections of other resource types protected by EmpowerID. Each code-based Set requires a Set Runtime, which is a custom implementation of the EmpowerID API that allows C# code to be used to return a collection of EmpowerID object types. You create code-based Sets in Workflow Studio. [Read More]
Create Query-Based Collections
Query Based Collections (SetGroups) are logical groupings of Sets bundled together with a friendly name for resource management, such as "Helpdesk Technicians" or "High Security SharePoint Documents." Membership within a Query-Based Collection is dynamic. Each compilation of the Set Compiler Job adds and removes objects from each Query-Based Collection based on the query results of the Sets. [Read More]
Assign Access Levels to Query-Based Collections
Access Levels are bundles of EmpowerID operations and/or native system rights specific to a resource type that, when assigned to users, grants those users the ability to access IT resources in the manner specified by the Access Level. When you assign Access Levels to Query-Based Collections, each member of the Query-Based Collection will receive those Access Levels and be able to perform the tasks associated with them. For example, if you assign the Member Access Level for a generic group to a Query-Based Collection, each person in the collection will be granted group membership. [Read More]
Assign Query-Based Collections to Roles
Assigning Query-Based Collections to EmpowerID Roles gives everyone in the Query-Based Collection (QBC) access to any resources defined for those roles. [Read More]
Evaluate Query-Based Collections
Evaluating a Query Based Collection executes the query in each of the Sets belonging to the Collection. These evaluations are dynamic, adding and removing objects from the Collection as determined by the Sets. For example, if you have a Query-Based Collection with a Set that returns all people hired within the last week, the people in the Collection vary from week to week. [Read More]