NIM

Create, edit, or remove a role generator

For more information, see Role generators.

Create a role generator

For more information, see Role generators.

  1. Create a filter for the Role Generation Filter of the role generator.

    This article will use the example filter & lookup shown in Create a lookup.

  2. Create a filter for the Role Member Filter of the role generator.

    This article will use the following example which is based on the HR500 test dataset as a source, and an Active Directory system as the target:

    2021-12-15_14-29-04.png
  3. Go to Output > Roles.

  4. Go to the Role Generation tab.

    2021-12-14_15-04-12.png
  5. Click Add.

  6. Enter a Role Generator Name.

    2021-12-14_15-05-10.png

    For example, ad_departments.

  7. Click Create.

  8. For Role Generation Filter, select the filter you created in step (1).

    2021-12-15_13-41-57.png
  9. For Role Name Column, select the column of the Role Generation Filter based on which roles should be generated. Typically departments or similar.

    2021-12-15_13-42-29.png
  10. For the Role Member Filter, select the filter you created in step (2).

    2021-12-15_13-44-32.png
  11. For the Member Filter Param Value, select the column from the Role Generation Filter to feed through the parameter in the Role Member Filter, to generate the roles. Typically this is the same as the Role Name Column.

    2021-12-15_13-52-12.png
  12. The Role Groups pane is automatically populated. Select the Enabled checkbox for the entry.

    2021-12-15_13-53-49.png
  13. Click Save.

  14. Optional: Go to the Members tab and click Calculate to preview the members that will be assigned to the generated roles.

    2021-12-15_13-59-36.png
  15. Optional: Go to the Groups tab and click Calculate to preview the groups in the target system which will be included in generated roles. Only groups found in the Lookup are included.

    2021-12-15_14-01-45.png
  16. Optional: Go to the Roles tab and click Calculate to preview the roles that will be generated.

    2021-12-15_14-08-00.png
  17. Go to the Run tab.

  18. Optional: Adjust the Execution Options.

  19. Click Calculate to preview all operations that will be performed.

    2021-12-15_14-15-05.png
  20. Click Apply Generator to execute the role generator.

  21. Go to Roles > Role Models and Edit a role model for the active role model.

    The active role model has been populated with the generated roles.

    2021-12-15_14-23-01.png

    Note

    If you manually edit the roles in the active role model, and subsequently apply this role generator again, it will overwrite any manual changes you made.

  22. You can now Create a job to execute the role model.

  1. Go to Output > Roles.

  2. Go to the Role Generation tab.

  3. Click edit-task.png Edit Role Generator for the relevant role generator.

  4. Continue by following the steps in Create a role generator.

  1. Go to Output > Roles.

  2. Go to the Role Generation tab.

  3. Click remove-password-generator.png Remove Role Generator for the relevant role generator.

  4. Click Yes.