Query-Based Collections, also known as Set Groups, are logical bundles of Sets grouped together with a friendly name for resource management. Sets are queries made against the EmpowerID Identity Warehouse that result in collections of people or resources.
Set Groups offer advantages over groups and roles in that they
- can contain any type of resources,
- are continuously evaluated to ensure they contain the appropriate resources,
- can be used as actors, and
- can be the recipients of EmpowerID policies for provisioning, deprovisioning, attribute assignment, password policies, etc.
Set Groups (Query-Based Collections) are managed as a type of RBAC-protected resource in order to delegate who may create and manage them.