Working with Authorizations Version 2.0 ADAM Training Session.
-
Upload
annice-simpson -
Category
Documents
-
view
215 -
download
3
Transcript of Working with Authorizations Version 2.0 ADAM Training Session.
Working with AuthorizationsWorking with Authorizations
Version 2.0Version 2.0
ADAM Training SessionADAM Training Session
4.2
What is an Authorization?What is an Authorization?
An Authorization is: The ability to perform specific actions
within an application Performed by an Authorization Grantor
4.3
Key Components of an AuthorizationKey Components of an Authorization
End User Organization Profile Implies
Application
Authorization Grantor
4.4
Authorization Scenario – Part AAuthorization Scenario – Part A
Jack Black is an Authorization Grantor for IAPP
Organization = Northern Weed Committee
Profile = Program Manager Jack knows Clark Griswold requires
authorization immediately
4.5
Authorization Scenario – Part BAuthorization Scenario – Part B
What can Jack do? Authorize• Jack logs on to ADAM as an Authorization
Grantor for IAPP• Jack completes the following authorization
for Clark GriswoldGrant User CGRISWOLD
Access to Profile IAPP_PROGRAM_MANAGER
For Organization Northern Weed Committee
Effective Date Immediately
Expiry Date Never Expires
Enabled Yes
4.6
Authorization Access in ADAMAuthorization Access in ADAM
Jill = Application Administrator
Jack = Authorization Grantor
Clark = End User
4.7
DemoDemo
Demonstration of: Add Authorization
4.8
Add an Authorization (cont.)Add an Authorization (cont.)
Tips For the Organization Field:• If the content of the field is missing or blank
then verify acceptance of E-Agreements The “Enabled” check box must be ticked
for the authorization to be active as of the Effective Date
Comments can be seen by others End User receives email notification of
authorization
4.9
Add a Group AuthorizationAdd a Group Authorization
What is a Group Authorization? Allows Authorization Grantor to create
an authorization applicable to a group of users (i.e. all IDIR or all BCeID Users)
Authorization Grantor must have been granted ability to create Group Authorizations
4.10
Add a Group Authorization (cont.)Add a Group Authorization (cont.)
How do I add a Group Authorization? On New Authorization page:• Set “Grant Type = Group”• Use “Grant Group” field to select group of
users• Note: You can not modify the composition
of the group
Upon successful authorization, all users of the group will have the authorization
4.11
Add a Batch AuthorizationAdd a Batch Authorization
What if I have many identical Authorizations to create?
ADAM has a Batch Authorization page Allows:• Entry of multiple identical authorizations; or• File upload of multiple authorizations
4.12
Add a Batch Authorization (cont.)Add a Batch Authorization (cont.)
Batch Authorization Details Similar fields to a single authorization May enter multiple:• Users• Organizations• Profiles
It is highly recommended that Batch Authorizations are either for profiles secured by organization or those which are not secured by organization. Do not attempt to mix both types of profiles in a batch.
4.13
DemoDemo
Demonstration of: Add Batch Authorization
4.14
Add a Batch Authorization (cont.)Add a Batch Authorization (cont.)
Tips Authorization Process Confirmation page• Examine each authorization
Is it approved? Remove tick if you do not want to add the
corresponding authorization If the authorization is not approved by ADAM, you can roll
your mouse over the authorization (blue text) and an explanation is displayed
• Use “Complete” button to add all selected authorizations• End Users receive email detailing
Authorization
4.15
Recap – Types of AuthorizationsRecap – Types of Authorizations
Authorization Type DetailsSingle Authorization 1 User Authorized
1 Profile 1 Organization OR No Organization
Group Authorization 1 Group of Users Authorized 1 Profile 1 Organization or No Organization
Batch Authorization 1 or Multiple Users Authorized 1 or many Profiles 1 or many Organization(s) or No
Organization
Batch Group Authorization 1 or Multiple Groups of Users Authorized
1 or many Profiles 1 or many Organization(s) or No
Organization
4.16
Manage AuthorizationsManage Authorizations
Manage Authorizations page allows a Search for an authorization
• View authorizations• Edit authorizations
There can be more than one Authorization Grantor with the same delegation
• You can view/update authorizations which you did not create if you have the same authorization abilities
Update Authorization page• Modify details of an authorization• Examine authorization history• Delete authorization
4.17
DemoDemo
Demonstration of: Manage Authorizations
4.18
Manage Authorizations (cont.)Manage Authorizations (cont.)
Tips Do not delete an authorization unless
you are sure you want to delete it from ADAM• Use the enable checkbox (remove the tick)
to temporarily disable the authorization• Once you have deleted an authorization, you
will still be able to see it on the Manage Authorizations page (for historical purposes only)
Next Presentation: Understanding ADAM Agreements