This article is to talk about how others are using Grouper right now. Its uses are not limited to the methods below so if you have a question about how it can be used please do not hesitate to reach out to us.

• Group creation groups can be created in the directories out of Grouper and access to said groups can be delegated (Assigning Privileges) to users for management
• Automatic population curation of the directories (Active Directory, LDAP, Entra ID) with role-based group information pulled from one of the current Grouper data sources (IE: Campus Solutions, Human Capital Management (HCM). Active Directory, LDAP)
  • Ad-hoc group membership management of the directories (Active Directory, LDAP, Entra ID).
    • To maintain the validity of these groups, attestation (or a membership requirement) will be automatically required of the owner or owning group 
  • Database tables can be populated with information out of Grouper regarding group memberships.
• Provisioning utilizing the other functions of Grouper it is possible to have Grouper connect directly to applications bypassing the need for directory groups. This is being utilized via SCIM currently for multiple applications on campus.
• Group math is where a population can be determined by data and a subset of the population can be removed based on another population determined by data
  • Policy groups can be built by determining qualifiers membership and disqualifiers can be added to a denial group (allowed members – denied members = policy group membership).
  • Membership requirements can be used to allow or deny users being added to a group based on their membership in an eligibility group.
• Attestation can be used to help monitor the members of group. Notifications can be sent to a group, email, or users at a predetermined interval requesting that the population of the group be reviewed (attested) for accuracy.
  • This can also be used to monitor population activities by alerting when someone is added or removed from a group (when a user leaves the university a ticket can be submitted to take a specific action).

Still Need Assistance?

Please submit a ticket to the Technology Support Center (supportcenter@ilstu.edu) requesting it be directed to the Office of Identity and Access Management

See Also:

• What is Grouper?
• Group Naming Convention Standard
• Common terms in Grouper