You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.

Skip to end of banner
Go to start of banner

Assign Access Levels to Query Based Collections

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Access Levels are bundles of EmpowerID operations and/or native system rights specific to a resource type that when assigned to users grants those users the ability to access IT resources in the manner specified by the Access Level. When you assign Access Levels to Query-Based Collections, each member of the Query-Based Collection will receive those Access Levels and be able to perform the tasks associated with them. For example, if you assign the Member Access Level for a generic group to a Query-Based Collection, each person in the collection will be granted group membership.

Assign Access Levels to Query Based Collections

  1. On the navbar, expand Role Management and select Query-Based Collections (SetGroups).

  2. Search for the target collection and click the Display Name link for it.


    This directs you to the View page for the Query-Based Collection. View pages allow you to view and manage the objects to which they pertain.


  3. On the View page, expand the Access Granted to Query-Based Collection accordion and click the Add button.


    This opens the Grant Actor Access page. You use this page to select and scope the Access Levels you are assigning.

  4. In the Which Type of Access panel of the page, do the following:

    1. Assign Direct to Resource or Other Method — Select the type of assignment

      • Direct — Select this option if you want to assign access to a specific resource, such as a single group

      • By Location — Select this option if you want to assign access to all resources in a specific location (and below if the location has child locations), such as all groups in Boston

      • Relative — Select this option if you want to assign access to all resources relative to members of the collection, such as all groups in a person’s locations

      • Belonging to which group — Select this option if you want to assign access to all users and people who are members of the selected group(s)

      • Belonging to which Management Role — Select this option if you want to assign access to all people who are members of the selected Management Role(s)

      • Belonging to which Query-Based Collection — Select this option if you want to assign access to all objects belonging to the Query-Based Collection

    2. Resource Type — Select the resource type for which you are assigning the BRL access, such as Group (Security)

    3. Access Level — Select the Access Level you are assigning to the collection such as Member

  5. In the Where: Select Resources or a Location panel, search for and select the target resource(s) or the target location (for By Location assignments)

  6. In the Why & for How Long? panel, do the following:

    1. Comment or Justification — Enter a comment about the assignment; optional

    2. Access Starts — Click the field and select a start date and time from the calendar; if a start date is not selected, access begins immediately

    3. Access Ends — Click the field and select an end date and time from the calendar; if an end date is not selected, access continues perpetually

    4. Click Add.

  7. Repeat steps 6 through 8 for each assignment you want to make.

  8. When ready to commit your changes, click Submit.


About Business Roles and Locations

What is an Organization?

Create Business Roles

Create Locations

Map EmpowerID Locations to External Locations

Create Business Role and Location Combinations

Assign Management Roles to Business Role and Location Combinations

Map Groups to Business Role and Location Combinations

Add People to Business Role and Location Combinations

View Members of Business Role and Location Combinations

Remove People from Business Role and Location Combinations

Delete Business Roles

Delete Locations

  • No labels