Current Behavior HelloID knows which users are resource owners or managers, but there is no way to automatically group these users. This means: Resource owners and managers must be manually added to a group or role before they can be given access to anything There is no standard, reusable way to reference "all resource owners" or "all managers" Administrators must build and maintain custom solutions to keep these groups up to date These custom solutions are not instant and add unnecessary maintenance overhead Why this is a problem Resource owners and managers need access to various HelloID features — such as processing recertification reports, reviewing managed products, or handling managed users — but they cannot get this access without a group to assign permissions to. Since HelloID already knows who these users are, manually maintaining these groups is redundant and error-prone. Suggested Improvement Automatically maintain a dynamic group that always contains the current set of resource owners, and a matching group for managers. These groups would: Stay up to date automatically as users become or cease to be resource owners/managers Be instantly available — no delays from scheduled tasks Be reusable across different HelloID features: recertification, managed products, managed users, and any future functionality that needs to target resource owners or managers Remove the need for administrators to build and maintain custom synchronization logic
