Identity and Access Management

Common uses for Grouper

Last modified 5/10/2024

This article is to talk about how others are using Grouper right now. Its uses are not limited to the methods below so if you have a question about how it can be used please do not hesitate to reach out to us.

  • Group creation groups can be created in the directories out of Grouper and access to said groups can be delegated (Assigning Privileges) to users for management
  • Automatic population curation of the directories (Active Directory, LDAP, Entra ID) with role-based group information pulled from one of the current Grouper data sources (IE: Campus Solutions, Human Capital Management (HCM). Active Directory, LDAP)
    • Ad-hoc group membership management of the directories (Active Directory, LDAP, Entra ID).
      • To maintain the validity of these groups, attestation (or a membership requirement) will be automatically required of the owner or owning group 
    • Database tables can be populated with information out of Grouper regarding group memberships.
  • Group math is where a population can be determined by data and a subset of the population can be removed based on another population determined by data
    • Policy groups can be built by determining qualifiers membership and disqualifiers can be added to a denial group (allowed members – denied members = policy group membership).
    • Membership requirements can be used to allow or deny users being added to a group based on their membership in an eligibility group.
  • Attestation can be used to help monitor the members of group. Notifications can be sent to a group, email, or users at a predetermined interval requesting that the population of the group be reviewed (attested) for accuracy.
    • This can also be used to monitor population activities by alerting when someone is added or removed from a group (when a user leaves the university a ticket can be submitted to take a specific action).

Still Need Assistance?

Please submit a ticket to the Technology Support Center (supportcenter@ilstu.edu) requesting it be directed to the Office of Identity and Access Management

See Also: