Query-Based Collections

About Query-Based Collections

Query-Based Collections, also known as Set Groups, are logical bundles of Sets, which are queries made against the EmpowerID Identity Warehouse that return collections of people or resources. Simply put, Set Groups or Query-Based Collections are sets grouped together with a friendly name for resource management.

Membership within a Set Group is dynamic. Each compilation of the Set Compiler Job adds and removes objects from each Set Group based on the results of the Set queries belonging to those Set Groups. For example, if you have an "All Engineers in New York" Set Group and hire a new engineer in the New York location named "John," at the next compilation of the Set Compiler Job EmpowerID will add John to that Set Group because he will be returned as by the Set query. If John later relocates to Sydney, at the next compilation of the Set Compiler Job after his relocation, he will be removed from the Set Group because he is no longer returned by the Set.

Use Cases

Set Groups offer the following advantages:

Set Groups can contain any type of resources.
Set Groups are continuously evaluated to ensure they contain the appropriate resources.
Set Groups can be used both as actors (when containing a collection of people) and as resources to be delegated to EmpowerID actors, including other Set Groups.
Set Groups can be recipients of EmpowerID policies for provisioning, deprovisioning, attribute assignment, password policies, etc.

An introduction to Query-Based Collections with a Demo.

Key Takeaways:

Query-Based Collections are logical bundles of Sets, which are queries made against the EmpowerID Identity Warehouse to return a collection of people or resources.
Query-Based Collections can provide greater flexibility for making access assignments in situations where those assignments cannot easily be made using other actors.
Query-Based Collections are also known as Set Groups.