Groups Page

Users can access the Groups page within Resource Admin by selecting 'Groups' from the Resource Type menu. This interface is structured to facilitate efficient group management. It offers various tabs, views, and controls that enable users to interact with, create, and update groups and their memberships.

Features Available on the Groups Page

Upon navigating to the Groups page, users have the capability to search for specific groups based on defined criteria and manage these groups as necessary.

Searching for Groups

Every object in the EmpowerID Identity Warehouse, including groups, is associated with a 'SearchTerms' property. This property contains a set of search values tailored to each object type, which can be used to find all matching objects. For groups, the 'SearchTerms' property includes a range of attributes:

Name
FriendlyName
Email
EmpowerIDName
EmpowerIDFriendlyName
LogonName
NetBiosName
FQN (Fully Qualified Name)
DistinguishedName
Description

Using these search terms, the API fetches all groups where the input search value corresponds to any of these attributes. For instance, inputting “admin” as a search value will prompt the API to return groups that match this value across any of the listed attributes, such as groups with 'admin' in their name, friendly name, email address, or other specified properties.

Searching for “admin” returns all groups where that value exists in any of the above-mentioned fields

Group Search Filters

Upon selecting 'Groups' as the resource type, the system initiates an API call to retrieve all group records accessible to the current user. Given the potentially large volume of records, especially in environments with numerous managed groups or extensive user access rights, navigating through these records can be challenging.

To streamline the search process, Resource Admin incorporates a range of search filters. These filters are designed to refine the search results and can be employed in conjunction with or independently of the previously mentioned search terms. The availability of multiple filters supports granular searching, allowing users to pinpoint specific groups based on various criteria.

Filter	Description

Filter	Description
Owned By	This filter provides users with options to list groups based on ownership. Options include: Anybody – View all groups Myself – View only groups owned by the user Someone Else – View only groups owned by the specified person Users must have the appropriate role assignment to see the `Owned By` filter.
Target System	This filter provides users with options to list only those groups belonging to the selected account store type and/or account store. Select Account Store Type allows you to filter groups to display only those belonging to Account Stores configured with the selected Account Store Type. Select Account Store allows you to filter groups to display only those belonging to the selected Account Store. The filter is used in conjunction with the selected Account Store Type filter to display groups belonging to the selected account store.
Applications	This filter provides users with the option to filter groups to display only those belonging to the selected application.
Location	This filter provides users with the option to filter groups to display only those belonging to the selected location.
Business Functions	This filter provides users with the option to filter groups to display only those granting members of the group the selected business function.
Rights	This filter provides users with the option to filter groups to display only those granting members of the group the selected rights.
Advanced Search	Provides advanced search capabilities to further filter groups based on one or more of the selected attributes. Name Technical Name High Level Classification Group Type Description

Interacting with Groups

In Resource Admin, every group is represented by a specific record that equips users with essential context for interaction. To access more detailed information about a group, users can utilize the 'Details' link present in each group record. Clicking this link navigates users to a Details view tailored for the selected group.

Within the Details view, various tabs are available, enabling users to comprehensively review and manage diverse aspects of the group. These tabs facilitate actions such as modifying group attributes, managing memberships, and reviewing group activity.

Additionally, each group record features a contextual workflow button (symbolized by the gear icon). Users granted the necessary permissions can engage this button to activate the 'Manage Group Wizard' workflow.

Clicking the 'Details' button for a group directs users to the Overview page. This page offers comprehensive information about thegroup, with navigable tabs designed for managing different aspects of the group, including its configuration, associated tasks, and user assignments.

Members

In the Resource Admin system, the 'Members' tab is specifically designed for group membership management. This tab allows users, particularly those with delegated privileges, to carry out various tasks related to the membership of a selected group.

Key functionalities accessible within this tab include:

View Current Group Membership: Users can view a list of all current members of the group. This feature is essential for monitoring the group's composition and ensuring that it aligns with current organizational needs.
Add New Group Members: This functionality enables the addition of new members to the group. Users can select and add individuals as needed, facilitating dynamic group management.
Remove Current Group Members: Users can also remove members from the group. This capability is crucial for maintaining the relevance and efficiency of the group, allowing for the timely removal of members who no longer need access or whose roles have changed.

Membership Changes

The 'Membership Changes' tab within Resource Admin is tailored for tracking and reviewing the history of membership changes within a specific group. This tab is especially useful for delegated users who need to monitor and audit group membership over time.

Key features available in this tab include:

Viewing Membership Change History: Users can access a detailed log of all membership changes that have occurred in the group. This includes information on when members were added or removed, along with details about the members involved.
Audit Trail for Membership Changes: The tab provides an audit trail, enabling users to review changes for compliance and internal control purposes. This includes timestamps, user IDs of those who made the changes, and a description of the change.
Filter and Search Capabilities: To aid in navigating the membership change history, users can employ filters and search functions. This allows for the quick retrieval of specific change events based on criteria such as date range, member name, or type of change.

RBAC Assignments

The 'RBAC Assignments' tab grants users the ability to view and manage the RBAC access assignments granted to the group. This tab is crucial for administrators who need to manage and audit access controls within group settings.

Functionalities available to users with delegated permissions in this tab include:

Viewing Detailed Information About Existing RBAC Access Assignments: Administrators can delve into the details of all RBAC access assignments that are currently linked to the group. This is vital for a comprehensive understanding of the group's access privileges and ensuring they align with organizational security policies and the group's specific roles.
Adding New RBAC Access Assignments to the Group: This feature enables the extension or alteration of the group's access capabilities. By adding new RBAC assignments, administrators can adapt the group's access rights to evolving needs or responsibilities within the organization.
Deleting Current RBAC Access Assignments from the Group: The ability to remove existing RBAC access assignments is also available.

Nested Group Members

The 'Nested Group Members' tab in the Resource Admin system is designed for administrators to manage the composition of nested groups within a parent group. This feature is particularly useful in complex organizational structures where groups are hierarchically organized.

Functionalities available to users with delegated permissions in this tab include:

Viewing Detailed Information About Existing Nested Group Members: Administrators can access in-depth information about the groups nested within the current group. This view is essential for understanding the hierarchical structure and the relationships between different groups.
Adding New Nested Group Members: This function allows for the incorporation of new groups into the nested structure of the current group. It facilitates the expansion or reorganization of group hierarchies to align with evolving organizational needs or objectives.
Deleting Existing Nested Group Members: Administrators can also remove groups from the nested structure. This capability is crucial for maintaining an up-to-date and efficient group hierarchy, ensuring that only relevant groups remain part of the nested arrangement.

Actions

The 'Actions' tab is designed to provide users with quick access to contextual workflows that are relevant to the currently selected tab. For instance, when a user is viewing the Overview tab, the Actions tab dynamically updates to display an action link that initiates the 'Manage Group Wizard' workflows. This dynamic adaptation ensures that users have the most relevant tools at their fingertips, tailored to their current context within the Groups page of the application.

Group Workflows Page

On the Groups Workflows Page, authorized users can access several workflows specifically designed for managing groups. This page acts as a centralized hub for these workflows, streamlining the process of locating and initiating various tasks.