As a HelloID admin, I want HelloID to recognize when a membership in Active Directory is already granted, so that redundant grant actions can be skipped during evaluation and give me a better evaluation forecast.
Process Overview:
  • Data Retrieval from Active Directory: Obtain data from the Active Directory target system, including permissions and memberships.
  • Conversion to Granted Entitlements: Transform Active Directory permission data into granted entitlements for evaluation.
  • Detailed Permissions Display: Display all permissions to be imported for each account, offering comprehensive insight.
  • Import of Converted Data: Import the converted Active Directory account data as granted entitlements into the system.
  • Evaluation Comparison: Contrast HelloID's desired state based on Business Rules (BR) with the current state in Active Directory.
Benefits:
  • Streamlined Evaluation: By importing existing Active Directory memberships and permissions, HelloID optimizes the evaluation process, enabling the system to skip redundant grant actions when memberships are already present.
  • Clarity in Changes: This approach provides a clearer overview of actual changes in Active Directory during evaluation, facilitating better decision-making and management.