I'm doing some development work for my company. I've created an application that uses Active Directory security groups to manage access, but I cannot figure out how to use the Via console to place the members of the appropriate Active Directory groups into the "Who Has Access" tab of the application properties.
I have tried several things, but would like a fresh approach to this issue.
It depends on what you are collecting.
If you have an identity collector defined you will be able to collect the identities
Check to see if you have an account collector or entitlement collector. Those will help you collect what access there is and you also can collect who has what access there.
Have you tried starting with the directory wizard for Active Directory, that might help you configure these collectors easier to collect what you need. That can be found under Resources->Directory and click the Create Directory button and select Active Directory. It will take you through a wizard where you are asked some high level details and then the collectors are created under the covers for you.
Adding to the answer, this tab will only be populated if you have entitlements assigned to accounts that are mapped to users. If all accounts have not access, or have access but are orphaned then this tab will not show any users.
I found that if you need entitlement collectors to populate that tab. Our Active Directory Account collectors collect both accounts and groups but nothing shows up in the Who Has Access tab. I think this is because groups collected through account collectors are more like organizational groups than entitlement/access type groups.
I'm not sure how to properly set this up using Active Directory but for our DB collectors we are able to collect organization groups through the account collector then collect entitlements(app-roles or resource-action entitlements) through the entitlement collectors and assign those entitlements to either organization groups or accounts directly.
Hope this helps!
It depends on what you are collecting.
If you have an identity collector defined you will be able to collect the identities
Check to see if you have an account collector or entitlement collector. Those will help you collect what access there is and you also can collect who has what access there.
Have you tried starting with the directory wizard for Active Directory, that might help you configure these collectors easier to collect what you need. That can be found under Resources->Directory and click the Create Directory button and select Active Directory. It will take you through a wizard where you are asked some high level details and then the collectors are created under the covers for you.