Build a Role Model
Intermediate training
Build an Active Directory group model, then use NIM roles to keep group memberships aligned with HR data.
Before you beginDirect link to Before you begin
This tutorial builds on the Provisioning tutorial. Complete that tutorial first: this workflow reuses its HR500 source, AD target, provisioning job, and schedule.
You will provision department-based AD groups, generate a role per department, and apply each role's memberships to AD.
Build the role modelDirect link to Build the role model
Provision department groupsDirect link to Provision department groups
Create a department filter, use include and exclude lookups to identify missing AD groups, and add the group-create mapping to the existing provisioning job.
You will finish with: department-based groups in AD, ready for role-based membership management.
Generate and apply the role modelDirect link to Generate and apply the role model
Create a parameterized role-member filter, generate department roles, review the resulting memberships, and activate the development role model.
You will finish with: an active role model that can synchronize AD memberships from HR data.