Automatically Assign Roles and Locations from External Roles and Locations

EmpowerID provides for the automatic assignment of Business Roles and Business Locations based on organizational data that comes from an authoritative source. This is accomplished through the use of two server Jobs that run in the worker role container or server.

Role and Location Compiler

This is a Job hosted by the EmpowerID Worker Role Windows service that runs on a schedule of every 5 minutes and determines the Business Roles and Locations that should be assigned to an EmpowerID Person based on information coming from an external system like an HR system. Only account stores where the Allow Role and Location Recalculation is set to Enabled will be considered. If multiple account stores are being monitored, those with a higher Role and Location Re-Eval Order value are given precedence. The following account store information is used by this job:

• Accounts related to an EmpowerID Person

• External Roles

• External Locations

• Associations between accounts, external roles, and external locations in an Account Store and whether the association is "Primary" (only one association can be designated as "Primary" for a given account per Account Store)

• Mappings managed in the EmpowerID Role and Location Mapper:

  • Mappings between external roles and EmpowerID Roles (an external role can be mapped to multiple EmpowerID Roles, but only one of these mappings is considered "Primary")

  • Mappings between external locations and EmpowerID Locations

As it processes an account record, it will place a transaction record into a queue table called the “Role and Location Compiler Inbox” to await processing by the Role and Location Processor job.

Open

Business Role and Location Recompiler Inbox

Role and Location Processor

This is a Job hosted by the EmpowerID Worker Role Windows service that runs every 1 minute and makes Business Role and Location changes as determined by the Role and Location Compiler. The processor performs the following actions:

• Changes a Person's primary Business Role and Location (only affects people whose primary role and location were not explicitly assigned)

• Assigns secondary roles and locations to a Person

• Removes secondary roles and locations from a Person

• Handles ambiguous assignments by reassigning people whose Business Role and Location is uncertain to the role and location specified in the EmpowerID Resource System's "Default User Creation Path. This only occurs when a Person's primary Business Role and Location was previously determined by Role and Location Compiler and set by the processor but can no longer be ascertained due to insufficient or inconclusive information.

By separating these functions into two jobs, you can disable the processor to view suggested changes in the Recompiler inbox before processing.