400 Unique positions need group access on onboarding process.

Question

My company has 400+ positions, each with different access levels in our Active Directory (AD). I want to automate the new user onboarding process as much as possible. I have discovered a method for assigning users to groups using custom commands for each individual position and then incorporating over 400 IF-ELSE statements into the business rules. Is this my only option, or is there a more efficient way to manage group access for each position? I'm aware of rule-based group access, but it seems I would still need to go through each position and each group to assign them, which might be only slightly less time-consuming than creating over 400 custom commands. Any assistance would be greatly appreciated.

Answer 1

Hello,

The approaches are exactly the ones you need to decide between. Using rule based groups seems to be a bit easier in terms of maintenance as each group will just have its own criteria for membership. At the same time using custom commands and a business rule triggering After creating a user will work instantly upon user creation. As such, it is a matter of your convenience as both approaches will work just fine. The following tutorial might be helpful: https://www.adaxes.com/help/AddUsersToGroupsByDepartment/.