About Query-Based Collections

Owned by Phillip Hanegan
Feb 29, 2024
2 min read

Query-Based Collections in EmpowerID offer a powerful way to unify connected account stores such as Active Directory, LDAP directories, SQL or Oracle databases, and external systems like HR systems. By providing live access to data from these sources, Query-Based Collections (also known as Set Groups) enable you to create dynamic groupings of people or resources based on SQL-based or code-based queries, known as “Sets.” SQL-Based Sets are created within the EmpowerID user interface and can be used to create collections based on information in the Identity Warehouse. Code-Based Sets, however, require development staff to create them in Workflow Studio and publish them to the Enterprise Workflow Server. These Sets can be used in connected account stores and external systems to return collections of people and resources, such as Shared Folders, Workflows, and EmpowerID Protected Controls.

Query-Based Collections can be used as an RBAC Actor type, similar to groups or Management Roles, to assign various types of access, provisioning policies, attribute assignments, password policies, and more. Essentially, Query-Based Collections serve as a type of RBAC-protected resource, allowing you to delegate creation and management permissions for enhanced access control and resource management.

Some key benefits of using Query-Based Collections in EmpowerID include:

  1. Dynamic groupings: Query-Based Collections enable you to create dynamic groups of people or resources based on specific criteria, ensuring that your collections stay up-to-date as your organization evolves.

  2. Efficient resource management: By bundling Sets into Query-Based Collections, you can manage resources more efficiently and maintain a clear overview of your resource assignments.

  3. Flexible access control: Query-Based Collections allow you to grant various types of access and permissions to different Actor types, providing flexible and granular control over your resources.

  4. Delegated permissions: You can delegate the creation and management of Query-Based Collections to specific users or groups, empowering them to maintain collections relevant to their job functions.

By leveraging the power of Query-Based Collections in EmpowerID, you can create a unified, dynamic, and efficient access control system that adapts to your organization's needs and simplifies resource management.