Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] example basis and reference groups?

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] example basis and reference groups?


Chronological Thread 
    < Chronological >      < Thread >
  • From: "Hyzer, Chris" <>
  • To: Liam Hoekenga <>, Bill Thompson <>
  • Cc: Grouper Users <>
  • Subject: Re: [grouper-users] example basis and reference groups?
  • Date: Tue, 15 Dec 2020 20:04:33 +0000
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=isc.upenn.edu; dmarc=pass action=none header.from=isc.upenn.edu; dkim=pass header.d=isc.upenn.edu; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=qQCRC0NKGY7znvdJX/ZC1N7zzktGq6XUtpIyfBJ76aw=; b=Uc86kheJE6q4An0u++WLdqTRNwldaRwaO3OY3BN/q5dCMZJ9Klhf+V5FhK2vSQsIiHi2DOhDR9g1foDe/vMeaIR4fCpl2hr3hvlRxtPw6BlwlP1QOfqkamcy1ydOzcexsnVHyUPqtyL3hCzsn9H7DT/WlbcpJ6OATsou0NBXFhdHfmGDM6xkJcoETQi/VkUr5KY79avYsY/I2cNiGhm5VNNAxzHOAkKwcmLg81EdgkdAC/SaeokyfYbqBAieBPoMMYZDoQ7+vUOweU7Z7oPrsA81mp17v6WEegKalRPgB6cCdwxBSPDAuaaSkHsKTpUCkHT3KrjC33+UOEPlaHJkdg==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=GszrMqVRT2seszUNptea1PUqlpn4vEBXKkwYVYOIiMQJAfuwF0pzdZm+vcl39izhlw9StTiFt5xpK41RqVcq/F8zCb9SsN9EDu2/AJw9IEyChOu0yZRpfFd4jRJ5sJ/DFU6WfoHUPV5pyTzKIvA/rfKIqh57eaklWyYZ7r89SwnmSH/tj4OOFD6JViEY0H2L3BbNrFByte6XIqWDque8kG9NJ7bcqKLWQ4rIkGLt/d+dwF+cswCqYhsqlBp6hzVbzAiT9Dc9dbZhdWhkjUo0Z0Nlt0nYMeTA4JAF+q2CNZZ7Fo15m36skFTT39fre3Q+vxOBHPpdn+JyWJeQnhgCEw==
One specific question though.  If a dept code 1234 is arcane but also institutionally meaningful, then is that a basis or a reference?  It is used in policies and has properties of both ref/basis.  My gut says reference since it is used in policies, but I could also see that as basis.  Maybe just pick one and doesnt matter that much since its a gray area?  I think classlists could be a similar situation...   course F2020_eng_cis_101 is both arcane and institutionally meaningful and is used in policies...  thoughts?  🙂
From: <> on behalf of Bill Thompson <>
Sent: Tuesday, December 15, 2020 12:37 PM
To: Liam Hoekenga <>
Cc: Grouper Users <>
Subject: Re: [grouper-users] example basis and reference groups?
 
Indeed. Policy groups should be service specific and backed up by reference/basis groups that can be used in any policy where they are needed.


On Tue, Dec 15, 2020 at 12:34 PM Liam Hoekenga <> wrote:
Hey Bill!

That would be fantastic.  I'll contact you off list.

> Generally we let access policy requirements drive what reference and basis groups we have.
We've been warned about making groups that were too specific / implemented for very specific uses.  I've been hoping we could generalize some stuff and make some broadly useful groups. 

Liam

On Tue, Dec 15, 2020 at 11:19 AM Bill Thompson <> wrote:
Hi Liam,

Happy to jump on a call to review Lafayette's setup.  Generally we let access policy requirements drive what reference and basis groups we have.

Best,
Bill


On Tue, Dec 15, 2020 at 11:27 AM Liam Hoekenga <> wrote:
We're trying to figure out how we want to slice and dice our HR data into basis and reference groups.  I'm aware of the "arcane codes" vs "institutionally meaningful" descriptions.. but it feels like some of our arcane codes might be institutionally meaningful (e.g. "department ID number").

I was hoping people might be willing to share samples of what they've implemented?

thanks!
-- 
Liam Hoekenga
ITS Identity and Access Management
The University of Michigan


Archive powered by MHonArc 2.6.19.

Top of Page