Eligibility rules allow you to restrict who can and cannot see and shop for IT resources that you have enabled for the IT Shop. In this article, we demonstrate how you can configure eligibility for an application role (group).
Configure eligibility
On the navbar of the EmpowerID Web interface, expand Identity Administration and click Groups.
From the All Groups tab, search for the group for which you want to add eligibility.
Click the Logon Name link for the group.
On the Group Details page that appears, select the Advanced tab and then click the Eligibility sub-tab near the bottom of the page. You should see four eligibility rules.
Eligibility rules:Resources Members Eligible to Request (As Actor) – Allows you to specify the resources that members of the group are eligible to request from the IT Shop.
Resources Members May Not Request (As Actor) – Allows you to specify the resources that members of the group are excluded from requesting. Resources added here will not be visible to any members of the group, even if they are eligible to request those resources by virtue of another assignment.
Who is Eligible to Request (As Resource) – Allows you to specify the actors eligible to shop for access to the group, as well as the eligibility type for each of those actors.
Who is Excluded from Requesting (As Resource) – Allows you to specify the actors not eligible to shop for access to the group.
Expand the accordion corresponding to the type of eligibility you want to assign or restrict and follow the steps outlined for that eligibility rule.
Add this rule when you want to give members of the group the ability to shop for access to the resources you add here.
Click the Add button in the grid header.
Fill in the fields of the Assignment Information pane:
Assignment Type – Select Direct or Location.
Eligibility Type – Select Eligible, PreApproved, or Suggested.
Resource Type – Search for and select the type of resource corresponding to the resource for which you are granting eligibility. For example, if you want to grant eligibility for a specific Management Role, you select Management Role as the resource type.
Enter a <Resource Type> Name to Search – Search for and select the specific resource to which members of the group are eligible to request. The resource must match the resource type or it will not appear when searching. For example, if you select Management Role as the resource type, you can only search for Management Roles.
After entering your information, click Save.
Repeat steps 2 and 3 to add other eligibility assignments as needed.
When ready, close the Assignment Information pane and click Submit
Add this rule when you want to explicitly restrict members of the group from having access to certain resources. Keep in mind that users restricted from resources will not be able to request those resources even if they have another assignment that that grants them eligibility.
Click the Add button in the grid header.
Fill in the fields of the Assignment Information pane:
Mode – Select Direct or Location.
Eligibility Type – Select Eligible, PreApproved, or Suggested.
Resource Type – Search for and select the type of resource corresponding to the resource for which you are granting eligibility. For example, if you want to grant eligibility for a specific group, you select Group as the resource type.
Enter a <Resource Type> Name to Search – Search for and select the specific resource to which members of the group are eligible to request. The resource must match the resource type or it will not appear when searching. For example, if you select Group as the resource type, you can only search for groups.
After entering your information, click Save.
Repeat steps 2 and 3 to add other eligibility assignments as needed.
When ready, close the Assignment Information pane and click Submit
Add this rule when you want to give users the ability to shop for membership in the group from the IT Shop.
Click the Add button in the grid header.
Fill in the fields of the Assignment Information pane:
Eligibility Type – Select Eligible, PreApproved, or Suggested.
Which Type of Assignee for this Policy – Search for and select the EmpowerID actor type for which you are granting eligibility. For example, if you want to grant all members of a specific group eligibility, you select Group as the assignee type.
Select <Assignee> Name to Search – Search for and select the specific assignee eligible for access to the group. The assignee must match the assignee type or it will not appear when searching. For example, if you select Group as the assignee type, you can only search for groups.
After entering your information, click Save.
Repeat steps 2 and 3 to add other eligibility assignments as needed.
When ready, close the Assignment Information pane and click Submit
Add this rule when you want to explicitly restrict specific users from being able to view or request access to the group from the IT Shop. Keep in mind that users restricted from the group will not be eligible for it even if they have another eligibility assignment for the Role and Location.
Click the Add button in the grid header.
Fill in the fields of the Assignment Information pane:
Eligibility Type – Select Eligible, PreApproved, or Suggested.
Which Type of Assignee for this Policy – Search for and select the EmpowerID actor type for which you are restricting eligibility. For example, if you want to restrict all members of a specific group from eligibility, you select Group as the assignee type.
Select <Assignee> Name to Search – Search for and select the specific assignee restricted from being eligible for access to the group. The assignee must match the assignee type or it will not appear when searching. For example, if you select Group as the assignee type, you can only search for groups.
After entering your information, click Save.
Repeat steps 2 and 3 to add other eligibility restrictions as needed.
When ready, close the Assignment Information pane and click Submit