About Resource Admin

You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.

About Resource Admin

EmpowerID's Resource Admin is a specialized application designed to enhance and streamline resource management. Tailored for individuals who either manage their own resources or possess administrative rights over resources owned by others, this application facilitates a range of management tasks. With its focus on efficiency and effectiveness, Resource Admin simplifies the complexities of resource management, making it an indispensable tool for administrators and resource owners alike.

Resource Admin

 

Core Functionalities of Resource Admin

Resource Admin provides several key functionalities, which can be broadly categorized into the following areas:

Currently, Resource Admin's scope is focused on applications, groups, Management Roles, people, mailboxes, and shared folders, with plans to expand to other resource types in future releases.

  1. Administration of Applications: Resource Admin is a tool that allows users to easily manage their applications, whether they are hosted on Azure or not. With Resource Admin, administrators can adjust application settings, manage security configurations, and control user access, all without requiring users to directly access the systems where those applications are hosted. By providing a centralized location for managing these tasks, Resource Admin gives administrators complete control over their applications. This includes the ability to manage settings, configurations, and access permissions, ensuring that applications are always up-to-date and secure.

  2. Management of Groups: Resource Admin streamlines group management, making it easy for administrators to add or remove members, assign roles and permissions, and carry out other group-related tasks. With this tool, administrators can create new groups, modify the attributes of existing groups, and ensure that users have the appropriate permissions based on their roles.

  3. Management of Roles: With the role management feature, users can easily manage the roles they own. This includes assigning role-based access controls, defining permissions, and maintaining configurations. The Resource Admin provides granular control over roles, which enhances the flexibility of role assignment and permission management.

  4. Management of Shared Folders: Resource Admin assists users in managing the shared folders that they own. The tool allows users to control access permissions, share or revoke access to specific folders, and maintain a secure collaboration environment. This feature simplifies the process of managing shared resources, which enhances efficiency and reduces potential errors.

  5. Administration of People: Managing and onboarding people is now easier than ever with Resource Admin. Its user-friendly wizard workflows simplify the process with step-by-step guidance, making it easy to add, manage, and align team members with their roles and responsibilities within the organization.

Exploring Resource Admin

The Resource Admin application has dedicated pages for managing different resources. Each page has controls and workflows that help streamline the resource management process. In the following material, we will take a closer look at these pages and controls, giving you an overview of how they work, their usage, and the benefits they offer. By exploring these features, you will understand how to make the most of the Resource Admin for efficient resource management.

Upon logging in to Resource Admin, users encounter a user interface that is customized to their assigned roles and the access rights attached to those roles. Thus, the pages and controls that they can view align directly with their access levels. The below image shows what a typical user might see after logging in to the application. This image is specific to the Manage Applications page but contains controls common to all pages of the application. Below the image is a list of the controls

 

Resource Admin User Interface for a user with full access to the application

 

 

 

The Resource Admin application includes the following controls. Depending on their level of access to Resource Admin and other EmpowerID applications, users may not see all controls and menu options.

Control

Description

Control

Description

Application Sidebar

Allows you to navigate from Resource Admin to other EmpowerID applications.

 

Resource Type Dropdown

Allows users to select the appropriate resource type for the resource they want to view. For example, to view Management Roles, users would select Management Roles from the Resource Type dropdown.

Resource Panel

Provides a grid or card view of the resources users can manage. Each record has a Details button for accessing more information about the resource and a Wizard workflow button for managing the resource.

 

For example, clicking the Details button for a group opens to the Overview page for the group with tabs and buttons for viewing additional information about the group and performing actions against it. The below image shows the Overview page for a group.

 

Workflows Page

Provides a list of workflows users can initiate against the selected resource type. The below sctreenshot shows workflows that can be initiated against groups.

 

 

Filter Pane

Provides filters to selectively filter the resources you see. Filters are listed below.

Filters

Owned By

This filter provides users with options to view resources based on ownership. Options include:

  • Anybody – View all owned resources

  • Myself – View only the resources own by the user

  • Someone Else – View the resources owned by a specifc person

Users must have the appropriate role assignment to see the Owned By filter.

Azure Applications Only

This filter shows only Azure applications, simplifying the view for users managing Azure-based resources. This filter appears for applications only.

Target System

This filter enables users to view applications and groups based on the selected Account Store Type and/or Account Store.

This filter only appears for groups and applications.

  • Select Account Store Type allows you to filter applications and groups to display only those belonging to Account Stores configured with the selected Account Store Type.

  • Select Account Store allows you to filter applications and groups to display only those belonging to the selected Account Store. The filter is used in conjunction with the selected Account Store Type filter to display applications and groups belonging to the selected account store.

 

Applications

This filter shows groups or roles that can be requested for a specific application. This filter appears only for groups and Management Roles.

Location

This filter shows groups or roles belonging to the specified location.

Business Functions

This filter shows groups and roles according to their Business Functions. This filter appears only for groups and Management Roles.

 

 

Rights

Filters available groups and roles by external system rights granted to those resources. This filter appears only for groups and Management Roles.

UNC Path

Filters shared folders by the specified UNC path.

Advanced Search

Provides advanced search capabilities to further filter resources.

Resource Admin Architecture

Subcomponents

Resource Admin is a pre-configured EmpowerID microservice application that consists of multiple protected application subcomponents. These serve as functional units of the microservice and constitute the individual pages and controls users interact with. Each subcomponent is essentially an independent application, allowing its access to be customized for users via their Access Level assignments. This design makes the microservice easily customizable, with options to add or remove subcomponents directly from the EmpowerID Web interface.

 

1

Type

Display Name

Description

Application Resource GUID

2

Control

Application Roles Application Filter Resource Admin

Control that lets the user filter application roles on specified application

1ff1d0a4-e97f-4ab6-b76a-5e576cda10c4

3

Control

Application Roles Business Functions Filter Resource Admin

Control that lets the user filter application roles on specified business functions

c2d32613-9f90-4645-a630-c5bd341a2c72

4

Control

Application Roles Location Filter Resource Admin

Control that lets the user filter application roles on specified location

776ea49d-0d6b-4f28-a0db-0248e0d8b0ff

5

Control

Application Roles Rights Filter Resource Admin

Control that lets the user filter application roles on specified rights

86b83cb2-3a1f-4f7a-aeb3-d6fc95d1e677

6

Control

Applications Advanced Search Control Resource Admin

Control that lets the user run the Advanced Search on Applications

98306c4d-eb4d-4f09-9cde-daa09a606fb5

7

Control

Applications Owner Control Resource Admin

Owned Applications Filter

4c04d238-f235-4c15-a8a8-99c188359826

8

Control

Applications Target System Control Resource Admin

Control that lets the user run the Target System filter on Applications

e68d27aa-05dd-473a-a08a-8f28afd38c86

9

Control

Check In Active Checkouts Resource Admin

Has access to check in any currently active checkouts

47d5ecae-1730-4d25-a4cb-5b9141533e8e

10

Control

Management Roles Applications Filter Control Resource Admin

Control that lets the user filter management roles on a specific application

fb3d4683-6fa2-4ca3-b800-53d8e948f70c

11

Control

Management Roles Business Functions Filter Resource Admin

Control that lets the user filter management roles on specified business functions

e055cadc-120f-407e-9e81-e3cec60b0c7d

12

Control

Management Roles Location Filter Resource Admin

Control that lets the user filter management roles on specified location

2d59ab13-4fce-49b7-9c49-8fb7388f2bd7

13

Control

Management Roles Rights Filter Resource Admin

Control that lets the user filter management roles on specified rights

80f5e3d2-dff1-44c3-9c9f-4fdc529bf337

14

Control

ResouceAdmin - Application Details - General Details Column

Controls visibility of the general details column/section in Application Details banner

80cd47f4-3c29-4a61-8a20-651ac2b7ba97

15

Control

ResouceAdmin - Azure Application Details - General Details Column

Controls visibility of the general details column/section in Azure Application Details banner

f07a8e90-6732-4169-9643-2af26e3d8417

16

Control

Resource Admin Add New Management Roles Control

Controls if a user is allowed to add new app management roles

4e0abd8a-3c73-44a0-8875-f3b519c27c5e

17

Control

Resource Admin Management Role Details Access Granted

Control that lets user see the access granted tab in management role details

7f49ec91-d309-4b25-a6c5-d180162d332f

18

Control

Resource Admin Management Role Details Access Granted Add new Access Assignment button control

Control that lets user Add new access assignment in Access Granted page in Management Role Details

8817a385-df24-4fcc-9f57-3ec72e3aac46

19

Control

Resource Admin Management Role Details Members Change Member Type Control

Control that lets user switch between Direct and Resultant members in Management Roles details page

6d8b9adb-3a5a-4580-9b48-ba10564f294f

20

Control

Resource Admin People Detail Actions Pane

Control that lets the user see the Actions pane in People Details page

627b4ac2-4651-4f07-9803-a7c0bcd13739

21

Control

Resource Admin People Detail Basic Info Card

Control that lets the user see the Basic Info card in People Details page

977f9a8d-a82f-4d33-b1cc-f02ecda7d625

22

Control

Resource Admin People Detail Out of Office Card

Control that lets the user see the Out of Office card in People Details

800d8f2e-a781-4c63-b65d-311fe1265989

23

Control

Resource Admin People Listing Advanced Search Filter

Control that lets the user filter people listing using advanced search options

6fd4a227-1a0f-4048-b789-d024a1e28e69

24

Control

Resource Admin People Listing Display Name Column

Control that lets the user see Display Name column in the People Listing

efa482b1-f002-474c-bcf0-a18c4457c3a7

25

Control

Resource Admin People Listing Email Column

Control that lets the user see the Email column in People Listing in Resource Admin

e5ae48d2-d454-4fcc-b68c-cc19315a3fc4

26

Control

Resource Admin People Listing Enabled Column

Control that lets the user see the Enabled column in People Listing in Resource Admin

2ef87568-8438-41c8-b113-9cc3979e3df3

27

Control

Resource Admin People Listing Identity Type Column

Control that lets the user see the Identity Type column in the People Listing

f5714eec-26cb-4992-952d-1f0cdde73602

28

Control

Resource Admin People Listing Locations Filter

Control that lets the user filter people listing based on location

d1a105d4-18a9-4480-882a-499a51c61708

29

Control

Resource Admin People Listing Login Column

Control that lets the user see the Login column in People Listing in Resource Admin

c675a93c-f6b7-470a-a48f-406166b0cdf4

30

Control

Resource Admin People Listing ManagerID Column

Control that lets the user see the Manager ID column in People Listing

fdf0e270-39e3-417a-9364-2d7fcd25fff1

31

Control

Resource Admin People Listing Name Column

Control that lets user view Resource Admin People Listing Name Column

4b80ebec-2187-482d-bf4f-b5919a82a91a

32

Control

Resource Admin People Listing Role Column

Control that lets the user see the Role column in People Listing in Resource Admin

4706a2ed-819f-457f-8ea4-75e88037cec4

33

Control

ResourceAdmin Add New Access Assignment Control

Add New Access Assignment Control

ee03147f-63bc-4b3a-bd1f-24704a43147e

34

Control

ResourceAdmin Application Details APIPermissions

controls tabs for azure apps

112e636e-0d63-4da1-8acb-18337b7203a9

35

Control

ResourceAdmin Application Details AppManagementRole DetailButton Control

controls details button

4a7f7e0f-80a9-445c-bb39-82e81fa2769b

36

Control

ResourceAdmin Application Details AppManagementRoles

controls tabs for azure apps

601e2c90-1360-4252-8ba5-1a1cee9192ff

37

Control

ResourceAdmin Application Details AzureApplicationRoles

controls tabs for azure apps

4106bc62-aa20-4978-ac16-c214c791ae8b

38

Control

ResourceAdmin Application Details ClientCertificates

controls tabs for azure apps

a6b7d26e-8726-4b44-91f9-e45841dac5dd

39

Control

ResourceAdmin Application Details ClientSecrets

controls tabs for azure apps

7d53e3dd-ca1a-4d99-944b-16534ef27cb0

40

Control

ResourceAdmin Application Details IAMShopAssignees

controls tabs for azure apps

213dae7d-2e6c-4486-a526-e5909481150d

41

Control

ResourceAdmin Application Details IAMShopAssignments

controls tabs for azure apps

8c0abb41-1c74-4a62-aa92-f5b093c4d32f

42

Control

ResourceAdmin Application Details Role Definition

Control that lets the user see the Role Definitions of a selected application

e6feebf0-305d-44fb-a844-b0b365cfead5

43

Control

ResourceAdmin Application Details Role Definition Details App Rights

Control that lets the user see the app rights for a given role definition of a selected application

edff432f-4a25-4d3a-a111-a998084c3e72

44

Control

ResourceAdmin Application Details Role Definition Details Assignments

Control that lets the user see the assignments for a given role definition of a selected application

4fc9db8b-7b0f-4050-90bc-747d53da94ef

45

Control

ResourceAdmin Application Details Role Definition Details Eligiblity

Control that lets the user see the eligibilty for a given role definition of a selected application

bcc66a62-c0ff-4d8e-b19a-0df7455f8e92

46

Control

ResourceAdmin Application Details Role Definition Details People

Control that lets the user see the people for a given role definition of a selected application

21801f89-bd79-433d-a7f6-e2bbb3228c55

47

Control

ResourceAdmin Application Details Role Definition Details Sensitive Functions

Control that lets the user see the sensitive functions for a given role definition of a selected application

dc37360c-0e43-4806-986f-f328caea6025

48

Control

ResourceAdmin Application Details Scopes

controls tabs for azure apps

dc20daf8-f6a0-4a79-b3ad-6a46bc6957d1

49

Control

ResourceAdmin Application Details TokenConfigurations

controls tabs for azure apps

a8477d32-3c23-455f-aae6-05fec8854a96

50

Control

ResourceAdmin Application List ResourceSystem

Application List Attribute - Resource System

5ba0ff27-6519-4b4a-97a8-d7cedb4a4244

51

Control

ResourceAdmin Application List ResponsibleParty

Application List Attribute - Responsible Party

4d37473f-37c9-40a4-b42a-9a832cec3cdc

52

Control

ResourceAdmin Application List TechnicalName

Application List Attribute - Technical Name

28969cae-435b-4c6a-9ca0-cb87c2cd6bca

53

Control

ResourceAdmin ApplicationDetails AccessGranted AddNewAccessAssignment Control

Add New Access Assignment Control

0706271b-0853-4430-b179-7c296fe624f0

54

Control

ResourceAdmin ApplicationDetails AccessGranted ChangeType Control

Change type control

5c7df325-14c0-4d2e-ab40-277ccbf62d0d

55

Control

ResourceAdmin ApplicationDetails AccessGranted SelectAppManagementRole Control

Select App Management Role control

a46d1372-aab9-4e0a-a60e-51b828a65388

56

Control

ResourceAdmin ApplicationDetails AddNewRoleDefinition Control

controls add new role definition

22eae3ef-f580-46aa-aee6-017ce784af4b

57

Control

ResourceAdmin ApplicationDetails AddNewRoleDefinition Control

controls add new role definition

0d43f829-d264-488c-9884-2021603b0428

58

Control

ResourceAdmin ApplicationDetails AppManagementRole AccessGranted Assignee

Controls Attribute

79d926e9-4a53-4b91-abe2-5c4eff0e3e65

59

Control

ResourceAdmin ApplicationDetails AppManagementRole AccessGranted AssigneeTechnicalName

Controls Attribute

35313684-11f7-4908-94c7-ea04f0a8e7ef

60

Control