Query Based Collections, also known as Set Groups, are logical bundles of Sets grouped together with a friendly name for resource management. Sets are queries made against the EmpowerID Identity Warehouse that result in collections of people or resources.
Set Groups offer advantages over groups and roles in that they
- can contain any type of resources,
- are continuously evaluated to ensure they contain the appropriate resources,
- can be used as actors, and
- can be the recipients of EmpowerID policies for provisioning, deprovisioning, attribute assignment, password policies, etc.
Set Groups (Query-Based Collections) are managed as a type of RBAC-protected resource in order to delegate who may create and manage them. The topics in this section show you how to get started with Query Based Collection.
Getting Started
Query Based Collections Overview
Creating SQL Sets
Creating Code-Based Sets
Creating Query Based Collections
Creating Query Based Collections
Evaluating Query Based Collections
Evaluating Query Based Collections
Assigning Query-Based Collections to Roles
Assigning Query Based Collections to Roles