New and/or Adjusted Functionality
Import of AD Group Membership
In the manual import of authorizations a new type of import was added, the AD Group Membership. This import will import the members of a AD Group into the Authorizations table into a specific Datasource. Initially only the manual started import of the AD Groups is supported.
This will enable for example the ability to do an Periodic Access review on the AD Group Memberships.
The Datasource to which the AD Group Authorizations can be import needs to be of the type AD Groups. This can be defined in the Master Data / Datasources.
When clicking the Add/Import/Scan button in the Client Application the following menu appears. Here an option is added, AG Groups Authorizations.
When this option is clicked the import of the AD Group authorizations can be configured.
The following attributes / fields need to be filled:
Active Directory Domain
Select the AD domain from which the AD Groups membership is to be imported. Only one AD Domain can be selected.
Datasource
Select the Datasource to which the Authorizations are imported. In the drop down, only Datasources of type AD Groups are shown to be selected.
Access Mode
Select an access mode which is used to create the authorizations.
Company
If applicable, a company can be selected which is used to create the authorizations.
Also Update Existing Employees
When this option is checked, the AD import will also update the existing Employees based on the AD properties
Select AD Groups
Here the AD Groups to be included in the import van be selected. If there is a parent child structure in the AD Groups, the selection of a parent will also select the child AD Groups. Finding the right AD Groups, is supported by a “Search Groups” function.
Proceed
This will start the AD Groups Authorizations import based on the defined settings.
The following attribute mapping is plied when generating the authorizations:
Employee = AD Account -> sAMAccountName
Datset = Provided by the user via UI
Company = Provided by the user via UI
Role Code = AD Group -> cn
Role Description = AD Group -> description
Access Point Code = AD Group -> cn
Access Point Description = AD Group -> description
Access Mode & Level = Provided by the user via UI
ACR Email notification
When an ACR is created an email can be send to the email address of the Application. This email content was empty, now the email is filled with the ACR details:
ACR Header Information
• Code: ACR_Code
• ACR Template: ACR_Template-Code
• Type of Request: Indicates origin
• Current Status: Sent/Processed
• Authorization Employee Group :
• Requested On: date and time
• Requestor Account: account name requestor
• Requestor Name: name requestor
• Requested for Employee Account: account name requested
• Requested for Employee Name: name requested
ACR Details Information. Tabel with the following columns:
• Status
• Action
• Company Code
• Company Desc.
• Role Code
• Role Description
• Diagram Code
• Diagram Description
• Access Point Code
• Access Point Description
• Access Mode Name
• Access Mode Desc.
• Access Level
Bug Fixes
EZ-Compliance Client: Employee Import (TICKET 2270)
Resolved issue with the Employee Import, where the wrong Employee Type could be used if its custom value is the same as the value of another enum (not being Employee Type)