Configure Role Mining
- Phillip Hanegan
Configuring Bottom Up Role Mining in EmpowerID involves setting the values of the workflow parameters for the InvokeRoleMiningScript workflow. This workflow is executed each time you initiate a role mining campaign.
To run a serverless role mining campaign in EmpowerID, your organization must be running EmpowerID in Azure. All Python runs in Azure.
Set the workflow parameter values
On the navbar, expand Low Code/No Code Workflow and click Low Code Workflow.
Search for Invoke Role Mining and click the Display Name link for the Invoke Role Mining Script workflow.
This directs you to the View One page for the workflow.From the Request Workflow Parameters accordion, click the edit icon for each parameter you need to change and edit the values as required for your organization. Parameters are listed below the image.
Parameter | Purpose |
|---|---|
AttributeWeight | Specifies the weight or ranking given to an attribute during a role mining campaign |
EntitlementWeight | Specifies the weight or ranking given to an entitlement during a role mining campaign |
MaxAttributesPerRole | Specifies the maximum number of attributes used to define a given role |
MaxEntitlementsPerRole | Specifies the maximum entitlements for a given role |
MaxRoles | Specifies the maximum number of roles that can be set by a role mining campaign |
MaxUsersPerRole | Set the maximum number of users per role |
MinAttributesPerRole | Set the minimum number of attributes used to define a role |
MaxEntitlementsPerRole | Set the maximum number of entitlements granted per role |
MinUsersPerRole | Set the minimum number of users for a role to be created |
PythonCompilerPath | Specifies the location of the python.exe on the local machine (if running locally). |
PythonScript | Specifies the location of the Python script on the locate machine (if running locally). |
RoleMiningTaskParticipantID | This is the PersonID of the Role Mining Task Participant |