Identity and Access Management
Common uses for Grouper
Last modified 5/10/2024
This article is to talk about how others are using Grouper right now. Its uses are not limited to the methods below so if you have a question about how it can be used please do not hesitate to reach out to us.
- Group creation groups can be created in the directories out of Grouper and access to said groups can be delegated (Assigning Privileges) to users for management
- Automatic population curation of the directories (Active Directory, LDAP, Entra ID) with role-based group information pulled from one of the current Grouper data sources (IE: Campus Solutions, Human Capital Management (HCM). Active Directory, LDAP)
- Ad-hoc group membership management of the directories (Active Directory, LDAP, Entra ID).
- To maintain the validity of these groups, attestation (or a membership requirement) will be automatically required of the owner or owning group
- Database tables can be populated with information out of Grouper regarding group memberships.
- Ad-hoc group membership management of the directories (Active Directory, LDAP, Entra ID).
- Group math is where a population can be determined by data and a subset of the population can be removed based on another population determined by data
- Policy groups can be built by determining qualifiers membership and disqualifiers can be added to a denial group (allowed members – denied members = policy group membership).
- Membership requirements can be used to allow or deny users being added to a group based on their membership in an eligibility group.
- Attestation can be used to help monitor the members of group. Notifications can be sent to a group, email, or users at a predetermined interval requesting that the population of the group be reviewed (attested) for accuracy.
- This can also be used to monitor population activities by alerting when someone is added or removed from a group (when a user leaves the university a ticket can be submitted to take a specific action).
Still Need Assistance?
Please submit a ticket to the Technology Support Center (supportcenter@ilstu.edu) requesting it be directed to the Office of Identity and Access Management