In order to manage resources, those resources must belong somewhere. In EmpowerID, this "somewhere" is an object known as an "EmpowerID Location" or "Location." These locations are user-defined logical representations of the organizational and geographical structure of an enterprise that you can map to actual resource locations in the enterprise's external directories or simply use them as containers for delegation purposes.

This topic demonstrates how to create EmpowerID Locations.

If you are creating an EmpowerID Location to manage resources in an external directory, be sure to map the location to that external location; otherwise, changes made to any objects in the new location are not reflected in the external location.

To create a location

In the navigation sidebar of the EmpowerID Web interface, expand Identities and click Business Roles and Locations.
On the Business Roles and Locations page, click the Actions tab and then click Create Location.

This opens the Location Details form.
On the General tab of the Location Details form, do the following:
1. Enter a name and description for the location in the Name, Display Name and Description fields.
2. Select Is Assignable to allow resources to be assigned (belong) to the location. If you want to place people in the location, select this checkbox.
3. Optionally select Block Inheritance to prevent access granted to people in this location from being assigned to people in any child locations.
4. Select Do Not Allow Delete to prevent the location from being deleted.
5. Below Parent Location, click the EmpowerID System link.
6. In the Location Selector that appears, select a location under which to create the new location and click Save.
7. Select the location type from the Location Type drop-down list.
  
  If you are creating a location for an external organization such as a partner, select Organization - Security Container as the type. This lets you apply Visibility Restriction policies against the location that limit the ability of people in the organization to see resources that do not belong to the location.
8. Under Address, delete the Default Location, then click inside the Address box and press Enter to select an address.
9. Optionally click inside the Company box and press Enter to select a company for the location.
Optionally click the Extension tab and add extension attributes as needed.
Click Save.
If you are creating a location that has a specific start or end date, you can set ValidFrom and ValidUntil values in the database using a SQL statement like the following.
update OrgZone set ValidUntil = '2018-11-19 10:00:00' where OrgZoneID = 142109

To verify that the location was created

From the Business Roles and Locations management page, click the Locations tab and search for the location. A record for the location should be returned.
In the navigation sidebar, expand System Logs and click Audit Log.
In the Audit Log, click the Recently Created Objects tab and search for the location.

A record for the location appears in the grid.

Browser not supported