Dynamic Hierarchies Form Fields
- Phillip Hanegan
General
Select a Policy Type – Select Person attribute management role
Name – Name of the policy
Description – Description of the policy
Resource System – Select EmpowerID
Hierarchy Generation
Hierarchy Generation Enabled – Select this option to enable EmpowerID to generate hierarchies from the policy
Hierarchy Generation Next Run – Click the field and select the date and time for the next run of the Hierarchy Generation job
Hierarchy Generation Schedule – Set the start and end dates for hierarchy generation to occur
Hierarchy Generation Interval – Set the interval for the Hierarchy Generation job to process the policy. Options include:
Once – Hierarchy generation occurs one time
Minute Interval - Hierarchy generation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 minutes, indefinitely.
Hour Interval - Hierarchy generation occurs "X" times every "Y" hours as specified in the Run, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 hours, indefinitely.
Daily - Hierarchy generation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, hierarchy generation occurs on a daily basis at the time specified in the Times field.
Membership Recalculation
Membership Recalculation Enabled – Select this option to enable the system to update group membership as specified by the schedule and interval
Membership Recalculate Next Run – Set the date and time for the next run of the Dynamic Hierarchy Membership Recalculation job
Membership Recalculation Schedule – Set the start and end dates for hierarchy generation to occur
Membership Recalculation Interval – Set the interval for membership recalculation to run. Options include:
Once – Membership recalculation occurs one time.
Minute Interval – Membership recalculation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 minutes, indefinitely.
Hour Interval – Membership recalculation occurs "X" times every "Y" hours as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 hours, indefinitely.
Daily – Membership recalculation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, membership recalculation occurs on a daily basis at the time specified in the Times field.
Policy Settings
Attribute Name – Select the desired attribute
Naming Convention – At a minimum enter {Value1}. EmpowerID creates a dynamic Management Role for each attribute matching the value selected from the Attribute Name drop-down. For example, if you selected the Title attribute, a Management Role is created for each unique title and all people with those titles is added to the respective Management Role.
Empty Management Role Action – Select an appropriate action for EmpowerID to take if a Management Role created by the policy has no members.
Parent Management Role Definition – By default, the Blank Management Role Definition is set as the parent. This definition has no inherit delegations and is a template from which you can create custom Management Roles. If you need to select a different role definition, search for and select that definition. The dynamic role inherits all the delegations of the parent.
Alerts
Create Management Role Alert Active – Select this option if you wish for the alert chosen for the Create Management Role Alert setting to be sent to subscribers when a Management Role is created based on the dynamic hierarchy policy settings.
Create Management Role Alert – When Create Management Role Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID creates a new Management Role from the policy. By default, the alert is set to the Hierarchy Create Management Role alert.
Delete Management Role Alert Active – Select this option if you wish for the alert chosen for the Delete Management Role Alert setting to be sent when a Management Role is deleted based on the dynamic hierarchy policy settings. The specific setting that governs whether or not a Management Role is automatically deleted is the Empty Management Role Action setting. If that field is set to Delete, the only time EmpowerID deletes a dynamic Management Role is when there are no members with the role.
Delete Management Role Alert – When Delete Management Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID deletes a Management Role that was previously created from the policy.
Membership Change Alert Active – Select this option if you wish for the alert chosen for the Membership Change Alert setting to be sent to subscribers when the membership of the Management Role changes.
Membership Change Alert – When Membership Change Alert Active is enabled (checked), this sends an alert when the membership of a Management Role created by the policy is changed by the policy. By default, the alert is set to Hierarchy Management Role Membership Changed alert.
General
Select a Policy Type – Select Two level attribute management role
Name – Name of the policy
Description – Description of the policy
Resource System – Select EmpowerID
Hierarchy Generation
Hierarchy Generation Enabled – Select this option to enable EmpowerID to generate hierarchies from the policy
Hierarchy Generation Next Run – Click the field and select the date and time for the next run of the Hierarchy Generation job
Hierarchy Generation Schedule – Set the start and end dates for hierarchy generation to occur
Hierarchy Generation Interval – Set the interval for the Hierarchy Generation job to process the policy. Options include:
Once – Hierarchy generation occurs one time
Minute Interval - Hierarchy generation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 minutes, indefinitely.
Hour Interval - Hierarchy generation occurs "X" times every "Y" hours as specified in the Run, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 hours, indefinitely.
Daily - Hierarchy generation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, hierarchy generation occurs on a daily basis at the time specified in the Times field.
Membership Recalculation
Membership Recalculation Enabled – Select this option to enable the system to update group membership as specified by the schedule and interval
Membership Recalculate Next Run – Set the date and time for the next run of the Dynamic Hierarchy Membership Recalculation job
Membership Recalculation Schedule – Set the start and end dates for hierarchy generation to occur
Membership Recalculation Interval – Set the interval for membership recalculation to run. Options include:
Once – Membership recalculation occurs one time.
Minute Interval – Membership recalculation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 minutes, indefinitely.
Hour Interval – Membership recalculation occurs "X" times every "Y" hours as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 hours, indefinitely.
Daily – Membership recalculation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, membership recalculation occurs on a daily basis at the time specified in the Times field.
Policy Settings
Management Role Definition Attribute Name – Select the Person attribute on which to base the generated Management Role Definitions
Management Role Attribute Name – Select the Person attribute on which to base the generated Management Roles
Management Role Naming Convention {Value1} {Value2} – At a minimum enter {Value1} {Value2}. EmpowerID creates a Management Role for each combination of attributes matching the values selected from the Management Role Definition Attribute Name and the drop-downs. For example, if you selected the Department and Office attributes, a Management Role is created for each unique Department and Office combination and all people with those attribute values is added to the respective Management Role.
Management Role Definition Naming Convention - {Value1} – Specify the name of the Management Role Definition to be created, replacing {Value1} with the appropriate name.
Empty Management Role Action – Select an appropriate action for EmpowerID to take if a Management Role created by the policy has no members.
Alerts
Create Management Role Alert Active – Select this option if you wish for the alert chosen for the Create Management Role Alert setting to be sent to subscribers when a Management Role is created based on the dynamic hierarchy policy settings.
Create Management Role Alert – When Create Management Role Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID creates a new Management Role from the policy. By default, the alert is set to the Hierarchy Create Management Role alert.
Delete Management Role Alert Active – Select this option if you wish for the alert chosen for the Delete Management Role Alert setting to be sent when a Management Role is deleted based on the dynamic hierarchy policy settings. The specific setting that governs whether or not a Management Role is automatically deleted is the Empty Management Role Action setting. If that field is set to Delete, the only time EmpowerID deletes a dynamic Management Role is when there are no members with the role.
Delete Management Role Alert – When Delete Management Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID deletes a Management Role that was previously created from the policy.
Membership Change Alert Active – Select this option if you wish for the alert chosen for the Membership Change Alert setting to be sent to subscribers when the membership of the Management Role changes.
Membership Change Alert – When Membership Change Alert Active is enabled (checked), this sends an alert when the membership of a Management Role created by the policy is changed by the policy. By default, the alert is set to Hierarchy Management Role Membership Changed alert.
General
Select a Policy Type – Select One level dual attribute groups
Name – Name of the policy
Description – Description of the policy
Directory – Select the account store where the group is to be created
Hierarchy Generation
Hierarchy Generation Enabled – Select this option to enable EmpowerID to generate hierarchies from the policy
Hierarchy Generation Next Run – Click the field and select the date and time for the next run of the Hierarchy Generation job
Hierarchy Generation Schedule – Set the start and end dates for hierarchy generation to occur
Hierarchy Generation Interval – Set the interval for the Hierarchy Generation job to process the policy. Options include:
Once – Hierarchy generation occurs one time
Minute Interval - Hierarchy generation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 minutes, indefinitely.
Hour Interval - Hierarchy generation occurs "X" times every "Y" hours as specified in the Run, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 hours, indefinitely.
Daily - Hierarchy generation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, hierarchy generation occurs on a daily basis at the time specified in the Times field.
Membership Recalculation
Membership Recalculation Enabled – Select this option to enable the system to update group membership as specified by the schedule and interval
Membership Recalculate Next Run – Set the date and time for the next run of the Dynamic Hierarchy Membership Recalculation job
Membership Recalculation Schedule – Set the start and end dates for hierarchy generation to occur
Membership Recalculation Interval – Set the interval for membership recalculation to run. Options include:
Once – Membership recalculation occurs one time.
Minute Interval – Membership recalculation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 minutes, indefinitely.
Hour Interval – Membership recalculation occurs "X" times every "Y" hours as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 hours, indefinitely.
Daily – Membership recalculation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, membership recalculation occurs on a daily basis at the time specified in the Times field.
Policy Settings
First Attribute to Group By – Select the first attribute on which to base the group membership
Second Attribute to Group By – Select the second attribute on which to base the group membership
Claim Matching Group – Select this option to have any matching groups already in the system to be marked as dynamic hierarchy groups
Mail-Enable Groups – Select this option to mail-enable the groups created by the policy.
Empty Group Action – Select an appropriate action for EmpowerID to take if a group created by the policy has no members.
Delay Removal of Membership by X Days – Set the number of days EmpowerID waits before removing people who no longer meet the criteria for group membership. This allows you to give people moving from one location to another to have access to whatever resources the policy gives to them. If the value is left blank, EmpowerID immediately removes all people no longer meeting the criteria for group membership.
Group Type – Select the type for the groups being created by the policy.
Dynamic Hierarchy Naming Convention {Value1}{Value2} – At a minimum enter {Value1} {Value2}. EmpowerID uses these values to dynamically create a separate group for each person or user account meeting the criteria for the group. For example, if you have users in different cities and states, a group is created for each city and state combination.
Group Creation Location – Click the Select an OU link and then select an OU for the group. If you do not pick a location, EmpowerID creates these groups in the default group creation location selected for the account store.
Alerts
Create Group Alert Active – Select this option if you wish for the alert chosen for the Create Management Role Alert setting to be sent to subscribers when a Management Role is created based on the dynamic hierarchy policy settings.
Create Group Alert – When Create Management Role Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID creates a new Management Role from the policy. By default, the alert is set to the Hierarchy Create Management Role alert.
Delete Group Alert Active – Select this option if you wish for the alert chosen for the Delete Group Alert setting to be sent when a group is deleted based on the dynamic hierarchy policy settings. The specific setting that governs whether or not a group is automatically deleted is the Empty Group Action setting. If that field is set to Delete, the only time EmpowerID deletes a dynamic group is when there are no members with the role.
Delete Group Alert – When Delete Management Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID deletes a group that was previously created from the policy.
Membership Change Alert Active – Select this option if you wish for the alert chosen for the Membership Change Alert setting to be sent to subscribers when the membership of the group changes.
Membership Change Alert – When Membership Change Alert Active is enabled (checked), this sends an alert when the membership of a group created by the policy is changed by the policy. By default, the alert is set to Hierarchy Group Membership Changed alert.
General
Select a Policy Type – Select One level triple attribute groups
Name – Name of the policy
Description – Description of the policy
Directory – Select the account store where the group is to be created
Hierarchy Generation
Hierarchy Generation Enabled – Select this option to enable EmpowerID to generate hierarchies from the policy
Hierarchy Generation Next Run – Click the field and select the date and time for the next run of the Hierarchy Generation job
Hierarchy Generation Schedule – Set the start and end dates for hierarchy generation to occur
Hierarchy Generation Interval – Set the interval for the Hierarchy Generation job to process the policy. Options include:
Once – Hierarchy generation occurs one time
Minute Interval - Hierarchy generation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 minutes, indefinitely.
Hour Interval - Hierarchy generation occurs "X" times every "Y" hours as specified in the Run, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 hours, indefinitely.
Daily - Hierarchy generation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, hierarchy generation occurs on a daily basis at the time specified in the Times field.
Membership Recalculation
Membership Recalculation Enabled – Select this option to enable the system to update group membership as specified by the schedule and interval
Membership Recalculate Next Run – Set the date and time for the next run of the Dynamic Hierarchy Membership Recalculation job
Membership Recalculation Schedule – Set the start and end dates for hierarchy generation to occur
Membership Recalculation Interval – Set the interval for membership recalculation to run. Options include:
Once – Membership recalculation occurs one time.
Minute Interval – Membership recalculation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 minutes, indefinitely.
Hour Interval – Membership recalculation occurs "X" times every "Y" hours as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 hours, indefinitely.
Daily – Membership recalculation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, membership recalculation occurs on a daily basis at the time specified in the Times field.
Policy Settings
First Attribute to Group By – Select the first attribute on which to base the group membership
Second Attribute to Group By – Select the second attribute on which to base the group membership
Third Attribute to Group By – Select the third attribute on which to base the group membership
Claim Matching Group – Select this option to have any matching groups already in the system to be marked as dynamic hierarchy groups
Mail-Enable Groups – Select this option to mail-enable the groups created by the policy.
Empty Group Action – Select an appropriate action for EmpowerID to take if a group created by the policy has no members.
Delay Removal of Membership by X Days – Set the number of days EmpowerID waits before removing people who no longer meet the criteria for group membership. This allows you to give people moving from one location to another to have access to whatever resources the policy gives to them. If the value is left blank, EmpowerID immediately removes all people no longer meeting the criteria for group membership.
Group Type – Select the type for the groups being created by the policy.
Dynamic Hierarchy Naming Convention {Value1}{Value2}{Value3} – At a minimum enter {Value1){Value2}{Value3}. EmpowerID uses these values to dynamically create a separate group for each person or user account meeting the criteria for the group. For example, if you have users in different countries, states, and cities, a group is created for each country, state and city combination.
Group Creation Location – Click the Select an OU link and then select an OU for the group. If you do not pick a location, EmpowerID creates these groups in the default group creation location selected for the account store.
Alerts
Create Group Alert Active – Select this option if you wish for the alert chosen for the Create Group Alert setting to be sent to subscribers when a group is created based on the dynamic hierarchy policy settings.
Create Group Alert – When Create Group Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID creates a new group from the policy. By default, the alert is set to the Hierarchy Create Group alert.
Delete Group Alert Active – Select this option if you wish for the alert chosen for the Delete Group Alert setting to be sent when a group is deleted based on the dynamic hierarchy policy settings. The specific setting that governs whether or not a group is automatically deleted is the Empty Group Action setting. If that field is set to Delete, the only time EmpowerID deletes a dynamic group is when there are no members with the role.
Delete Group Alert – When Delete Management Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID deletes a group that was previously created from the policy.
Membership Change Alert Active – Select this option if you wish for the alert chosen for the Membership Change Alert setting to be sent to subscribers when the membership of the group changes.
Membership Change Alert – When Membership Change Alert Active is enabled (checked), this sends an alert when the membership of a group created by the policy is changed by the policy. By default, the alert is set to Hierarchy Group Membership Changed alert.
General
Select a Policy Type – Select Two level attribute nested groups
Name – Name of the policy
Description – Description of the policy
Directory – Select the account store where the groups are to be created
Hierarchy Generation
Hierarchy Generation Enabled – Select this option to enable EmpowerID to generate hierarchies from the policy
Hierarchy Generation Next Run – Click the field and select the date and time for the next run of the Hierarchy Generation job
Hierarchy Generation Schedule – Set the start and end dates for hierarchy generation to occur
Hierarchy Generation Interval – Set the interval for the Hierarchy Generation job to process the policy. Options include:
Once – Hierarchy generation occurs one time
Minute Interval - Hierarchy generation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 minutes, indefinitely.
Hour Interval - Hierarchy generation occurs "X" times every "Y" hours as specified in the Run, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 hours, indefinitely.
Daily - Hierarchy generation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, hierarchy generation occurs on a daily basis at the time specified in the Times field.
Membership Recalculation
Membership Recalculation Enabled – Select this option to enable the system to update group membership as specified by the schedule and interval
Membership Recalculate Next Run – Set the date and time for the next run of the Dynamic Hierarchy Membership Recalculation job
Membership Recalculation Schedule – Set the start and end dates for hierarchy generation to occur
Membership Recalculation Interval – Set the interval for membership recalculation to run. Options include:
Once – Membership recalculation occurs one time.
Minute Interval – Membership recalculation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 minutes, indefinitely.
Hour Interval – Membership recalculation occurs "X" times every "Y" hours as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 hours, indefinitely.
Daily – Membership recalculation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, membership recalculation occurs on a daily basis at the time specified in the Times field.
Policy Settings
First Attribute to Group By – Select the first attribute on which to base the group membership
Second Attribute to Group By – Select the second attribute on which to base the group membership
Add Users as Members at All Levels and Do Not Nest Groups – If this option is enabled and for example, you have selected State as the first attribute to group by and City as the second attribute to group by, EmpowerID adds people with State and City attributes to both the State group created and the City group created. If this option is not selected, EmpowerID adds people to the nested group (in this case, the State-City group) only.
Create level 1 Groups Even if No Level 2 –
Claim Matching Group – Select this option to have any matching groups already in the system to be marked as dynamic hierarchy groups
Create OU for Level 1 – Select this option to have EmpowerID create an OU for the first-level group
Claim Matching OU – Select this option to have any matching OUs already in the system to be marked as dynamic hierarchy OUs
Mail-Enable Level 1 Groups – Select this option to mail-enable all first-level groups created by the policy
Mail-Enable Level 2 Groups – Select this option to mail-enable all second-level groups created by the policy
Empty Group Action – Select an appropriate action for EmpowerID to take if a group created by the policy has no members.
Delay Removal of Membership by X Days – Set the number of days EmpowerID waits before removing people who no longer meet the criteria for group membership. This allows you to give people moving from one location to another to have access to whatever resources the policy gives to them. If the value is left blank, EmpowerID immediately removes all people no longer meeting the criteria for group membership.
Group Type – Select the type for the groups being created by the policy.
Level 1 Naming Convention - {Value1} – At a minimum enter {Value1). EmpowerID uses these values to dynamically create a separate group for each person or user account meeting the criteria for the group. For example, if you have users in different countries, states, and cities, a group is created for each country, state and city combination.
Level 2 Naming Convention - {Value1} And {Value2} – At a minimum enter {Value1){Value2}. EmpowerID uses these values to dynamically create a separate group for each person or user account meeting the criteria for the group.
Group Creation Location – Click the Select an OU link and then select an OU for the group. If you do not pick a location, EmpowerID creates these groups in the default group creation location selected for the account store.
Alerts
Create Group Alert Active – Select this option if you wish for the alert chosen for the Create Group Alert setting to be sent to subscribers when a group is created based on the dynamic hierarchy policy settings.
Create Group Alert – When Create Group Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID creates a new group from the policy. By default, the alert is set to the Hierarchy Create Group alert.
Delete Group Alert Active – Select this option if you wish for the alert chosen for the Delete Group Alert setting to be sent when a group is deleted based on the dynamic hierarchy policy settings. The specific setting that governs whether or not a group is automatically deleted is the Empty Group Action setting. If that field is set to Delete, the only time EmpowerID deletes a dynamic group is when there are no members with the role.
Delete Group Alert – When Delete Management Alert Active is enabled (checked), this sends an alert to subscribers when EmpowerID deletes a group that was previously created from the policy.
Membership Change Alert Active – Select this option if you wish for the alert chosen for the Membership Change Alert setting to be sent to subscribers when the membership of the group changes.
Membership Change Alert – When Membership Change Alert Active is enabled (checked), this sends an alert when the membership of a group created by the policy is changed by the policy. By default, the alert is set to Hierarchy Group Membership Changed alert.
General
Select a Policy Type – Select Account Attribute External Roles and Locations
Name – Name of the policy
Description – Description of the policy
Directory – Select the account store where the groups are to be created
Hierarchy Generation
Hierarchy Generation Enabled – Select this option to enable EmpowerID to generate hierarchies from the policy
Hierarchy Generation Next Run – Click the field and select the date and time for the next run of the Hierarchy Generation job
Hierarchy Generation Schedule – Set the start and end dates for hierarchy generation to occur
Hierarchy Generation Interval – Set the interval for the Hierarchy Generation job to process the policy. Options include:
Once – Hierarchy generation occurs one time
Minute Interval - Hierarchy generation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 minutes, indefinitely.
Hour Interval - Hierarchy generation occurs "X" times every "Y" hours as specified in the Run, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, hierarchy generation occurs once every 24 hours, indefinitely.
Daily - Hierarchy generation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, hierarchy generation occurs twice. The first occurrence is at the date and time specified in the Hierarchy Generation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, hierarchy generation occurs on a daily basis at the time specified in the Times field.
Membership Recalculation
Membership Recalculation Enabled – Select this option to enable the system to update role membership as specified by the schedule and interval
Membership Recalculate Next Run – Set the date and time for the next run of the Dynamic Hierarchy Membership Recalculation job
Membership Recalculation Schedule – Set the start and end dates for hierarchy generation to occur
Membership Recalculation Interval – Set the interval for membership recalculation to run. Options include:
Once – Membership recalculation occurs one time.
Minute Interval – Membership recalculation occurs "X" times every "Y" minutes as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 minutes after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 minutes, indefinitely.
Hour Interval – Membership recalculation occurs "X" times every "Y" hours as specified in the Run Indefinitely, Iterations and Interval fields. So, for example, if you select an iteration of 2 and an interval of 24, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculate Next Run field and the second occurrence is 24 hours after the first run completes. However, if you select Run Indefinitely, and then select an Interval of 24, membership recalculation occurs once every 24 hours, indefinitely.
Daily – Membership recalculation occurs once every "X" days at a designated time as specified in the Run Indefinitely, Iterations and Times fields. So, for example, if you select an iteration of 2, membership recalculation occurs twice. The first occurrence is at the date and time specified in the Membership Recalculation Next Run field and the second occurrence is on the following day at the time specified in the Times field. However, if you select Run Indefinitely, membership recalculation occurs on a daily basis at the time specified in the Times field.
Policy Settings
External Role Level 1 – Specify the attribute that is to be used to generate the parent external role.
External Location Level 1 – Specify the attribute that is to be used to generate the parent external location.
External Role Level 2 – If nesting roles, specify the attribute that is to be used to generate the first child external role.
External Location Level 2 – If nesting locations, specify the attribute that is to be used to generate the first location external role.
External Role Level 3 – If nesting roles, specify the attribute that is to be used to generate the second child external role.
External Location Level 3 – If nesting locations, specify the attribute that is to be used to generate the second location external role.
Claim Matching Roles – Select this option to allow the Dynamic Hierarchy engine to claim any matching roles in the system as Dynamic Hierarchy generated roles.
Claim Matching Locations – Select this option to allow the Dynamic Hierarchy engine to claim any matching locations in the system as Dynamic Hierarchy generated locations.
Role Assignment Removal Delay (Minutes) – Specify the time in minutes that the engine should wait to remove users who no longer meet the criteria for Role and Location assignments from those Roles and Locations.
Empty Role Action – Specify the action EmpowerID should take if a generated role no longer contains any users. When doing so, you have the following options:
No Action
Delete – Deletes the role.
Empty Location Action – Specify the action EmpowerID should take if a generated location no longer contains any users. When doing so, you have the following options:
No Action
Delete – Deletes the location.
Level 1 Naming Convention {Value1} – At a minimum enter {Value1}. EmpowerID creates a dynamic Role and Location for each attribute matching the value selected from the External Role Level 1 and External Location Level 1 fields. For example, if you selected the JobTitle attribute for the external role and the Department for the external location, an external role is created for each unique job title and an external location is created for each department.
Level 2 Naming Convention {Value1}{Value2} – If you are nesting roles and locations, for the first child enter {Value1}{Value2}. EmpowerID creates a dynamic Role and Location under the parent Role and Location for each attribute matching the values selected from the External Role Level 2 and External Location Level 2 fields.
Level 3 Naming Convention {Value1}{Value2}{Value3} – If you are nesting roles and locations, for the child of the first child enter {Value1}{Value2{Value3}. EmpowerID creates a dynamic Role and Location under the first child Role and Location for each attribute matching the values selected from the External Role Level 3 and External Location Level 3 fields.