Role and Location Mapper

EmpowerID Role and Location mappings allow multiple externally inventoried locations (e.g., AD, LDAP, HR) directory containers to be visually mapped to a logical location (EmpowerID Locations) for unified and easy management and delegation of resources. When a mapping occurs, all the resources or objects located in the directory are assigned to a corresponding EmpowerID Location and can be used when assigning user rights and setting default policy settings.

If you create these mappings before your first inventory, all new people discovered by EmpowerID during the inventory process will be provisioned into EmpowerID Locations (instead of directory locations), and those EmpowerID Locations will be assigned to them as the "Location" portion of their Business Role and Location (BRL). For example, if you have a user named "Barney Smythe" in a London >> Contractors OU and a user named "ChrisMcClure" in a London >> Employees OU and you map both of those London OUs to a single London location in EmpowerID when you turn on your inventory the Location portion of the BRL for both Barney Smythe and Chris McClure would be the EmpowerID Location and not the AD OUs.

Location mappings also play a role in determining where a target account will be provisioned for a particular provisioning policy. If the provisioning policy is configured to use location mapping, the policy will look at the location assignment of the person and follow the mapping to determine which external location to create the target account in. This is most often used when provisioning accounts to Active Directory which has a defined OU structure.

Business Role and Location mappings allow existing external directory Locations and roles to be mapped to a logical management structure. e.g., Multiple AD or LDAP directory containers for “Offices” can be mapped to a single virtual “USA” Location for unified management and delegation. Open Role Mapper in the EmpowerID UI   Open Location Mapper in the EmpowerID UI

Live Demonstration