Grouper Users - Open Discussion List

[Steven Carmody <>]

Hi,

We've delegated to Depts the authority to create and manage adhoc groups 
to meet their local needs. We're now trying to figure what to do when a 
"significant" change occurs in a person's relationships with Brown, and 
their Roles. Examples could include a staff person moving to a new job 
in a different dept, or a student becoming an alum (we now support 
lifetime accounts for students/alumns).

We also allow people to authenticate for 18 months after separating from 
Brown, but remove all of the privileges that we know about (except being 
able to login to the HR/payroll system in order to obtain a W-2). "Doing 
something" about adhoc group memberships would be part of removing 
privileges.

Our current best thought (which isn't really very good) is to have the 
IDM/Person Registry/Provisioning Rules "tell" a process what change has 
occurred. That process would obtain all the adhoc groups that this 
person is a member of, and send an email to the owners of each group and 
the person saying that unless a certain action is taken by a certain 
date the person will be removed from the group (default is to remove). 
(Note -- people have a number of group memberships based on their 
affiliation and role; as their status in the relevant Business system is 
updated these memberships will be changed automatically; I'm only 
worried about adhoc memberships.)

We expect that other schools are already starting to encounter this 
problem, tho, and we're interested in hearing how other campuses are 
approaching this situation.

thanks in advance !