Home / Authorization RBAC/ABAC / Business Roles and Locations / Mapping Groups to Business Roles and Locations

EmpowerID allows you to create a mapping between Business Roles and Locations and groups. In this way, you can quickly assign all members of a specific group to a Business Role and Location. Then whenever someone is added to a group, that person is automatically assigned to the mapped Business Role and Location, receiving any RETs or Policy-Based Attribute Values assigned to the Business Role and Location.

Prerequisites

EmpowerID must be connected to an external directory with groups, such as Active Directory.

To map groups to Business Roles and Locations

From the Navigation Sidebar of the EmpowerID Web interface, expand Identities and click Business Roles.
From the Business Roles and Locations tab of the Business Roles and Locations management page, search for the Business Role and Location for which you want to create a group mapping.
From the tree-views, click the nodes for the Business Role and the Location to select them.
Expand the Mapped Groups (Group Members Become Role Assignees) accordion.
Type the name of the group you want to map to the Business Role and Location and then click the tile for that group.
Repeat step 5 for each group you want to map to the Business Role and Location.
When you have finished adding groups, click Submit.

Before submitting the assignment, you can review the groups being mapped to the Business Role and Location by clicking theAddedflag. If you want to remove the mapping, click theXto the right of that group. You can also submit the assignment from here by clicking the Submit button.
Click OK to close the Operation Execution Summary.

The newly mapped group shows in theMapped Groups (Group Members Become Role Assignees)grid.

Browser not supported