Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

Hey,

 

Patches grouper_v2_4_0_ui_patch_41 and grouper_v2_4_0_api_patch_69 are released.  There will be two more sets of patches released today.

 

Shilen has been working hard on these.  Thanks Shilen!  The patches solve three major use cases with attestation and are very valuable for deprovisioning/auditors.

 

1. If you are attesting (periodically reviewing the memberships) a group, this only really works if the group size is small and the attester knows all the people who should or shouldn’t be in the group (or maybe sets up some composites to help out).  You can setup a Grouper report (new feature recently), and can give more information than just seeing the members.  i.e. you could have rows for all members, columns for more contact info and job data, and columns for if the user is in a certain org, if they are active staff, if they are active at the institution, if they have taken training, if they are in MFA, if they have logged in recently, if they have had a change in affiliation in the last 6 months.  Basically whatever data you have can be in the report.  Then you can review groups of any size (since you are filtering by attributes), and can easily see what you need to see.
2. Applications frequently have multiple groups.  Maybe a lot.  Adding attestation to the folder or to a bunch of groups is tedious or unmanageable for the attester.  You can now add attestation to folders, but not in a way that requires the attesters to look at a lot of groups.  You might have noticed recently in Grouper that if you look at a folder, you can see a tab that has memberships of groups in the folder.  Another feature here is you can identify certain groups in the config (e.g. activePerson, activeEmployee, activeItStaff), and you can run a real time composite report on the folder memberships.  i.e. you can show the memberships of people who are not IT employees.  And can remove those memberships as needed quickly.  This is a kind of lightweight report.  You can attest this!  😊
3. Again, seeing a composite might not be enough information.  So you can do both of the above, by attesting a folder Grouper report.  This will show whatever you want it to show, but generally all the users of all groups and any flags or attributes of those users.

 

If you get this patch and kick the tires let us know 😊

 

Thanks

Chris