You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.

Role and Location Mapper

Owned by Phillip Hanegan
Aug 28, 2022
2 min read

EmpowerID Role and Location mappings allow multiple externally inventoried locations (e.g., AD, LDAP, HR) directory containers to be visually mapped to a logical location (EmpowerID Locations) for unified and easy management and delegation of resources. When a mapping occurs, all the resources or objects located in the directory are assigned to a corresponding EmpowerID Location and can be used when assigning user rights and setting default policy settings.

If you create these mappings before your first inventory, all new people discovered by EmpowerID during the inventory process will be provisioned into EmpowerID Locations (instead of directory locations), and those EmpowerID Locations will be assigned to them as the "Location" portion of their Business Role and Location (BRL). For example, if you have a user named "Barney Smythe" in a London >> Contractors OU and a user named "ChrisMcClure" in a London >> Employees OU and you map both of those London OUs to a single London location in EmpowerID when you turn on your inventory the Location portion of the BRL for both Barney Smythe and Chris McClure would be the EmpowerID Location and not the AD OUs.

If more than one OU is mapped to an EmpowerID Location, setting the IsPrimary property determines which mapping should be authoritative when used for various policies, such as creating accounts by RET and assigning primary Business Roles and Locations (when the Business Role and Location recalculation option is enabled).

How to map locations

  1. On the navbar, expand Identity Lifecycle and click Role and Location Mapper.

  2. Select the Location Mapper tab.

  3. From the Location pane of the Location Mapper tab, enter the name of the EmpowerID location you want to map and press ENTER to load the location.

  4. Select the location from the tree.

     

  5. From the External Location pane, enter the name of the external directory location to which you want to map the EmpowerID location. Please note that if you select an external location that is a parent location, the children of that location will be mapped to the selected EmpowerID location.

     

  6. Click Save to save the mapping.

  7. Repeat for any other mappings you wish to create.