You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.
Dynamic Group Management and Hierarchies
- Phillip Hanegan
EmpowerID's Group Management module revolutionizes how groups and application roles across various systems are handled, offering self-service, delegated administration, and role-based group membership through user-friendly web interfaces and workflows.
Automating Data-Driven Groups
A key feature is the automation of data-driven groups – those that are created, updated, and retired based on attribute query policies leveraging data from HR systems or other authoritative sources. EmpowerID's Dynamic Group Management module automates the entire lifecycle of these groups, eliminating the need for manual processes or scripts.
Dynamic Group Hierarchies Engine
EmpowerID's Dynamic Hierarchies engine automates the creation and maintenance of nested groups in systems like Active Directory and Azure Active Directory. This feature is geared towards meeting organizational needs for collaboration or email groups across various structural levels like locations, companies, divisions, departments, and managerial roles. These nested groups are generated based on business hierarchies, with information sourced from HR systems, Active Directory, or other key systems. Dynamic Hierarchy policies are easy to define and maintain groups automatically.
The true strength of Dynamic Hierarchies lies in their complete automation, significantly reducing the need for manual intervention. For instance, new departments in HR systems are automatically represented as nested groups, and organizational changes like promotions or restructurings are accurately and promptly reflected in the group structure.
Leveraging Data from Multiple Systems
EmpowerID's extensive library of IGA system connectors allows for the integration of user and HR record data from a diverse range of systems, from modern Cloud HR platforms like Workday and SuccessFactors to traditional on-premise systems like Active Directory and SAP. This integration enables flexible, attribute-based policies that ensure groups remain current for effective collaboration and security.