EmpowerID Admin Lab 15: Dynamic Hierarchy Policy for Employee Type Management Roles
Purpose
This lab guides you through creating a dynamic hierarchy policy that automatically generates management roles based on the Employee Type attribute of Person records. This approach helps automate assignments and governance by classifying individuals (e.g., Internal, External, Contractor) into role-based structures.
Prerequisites
- Access to the EmpowerID training environment.
- A Person directory with Employee Type data populated (e.g., Internal, External, Contractor).
- Familiarity with EmpowerID dynamic hierarchies and management role configuration.
Steps
1. Create the Dynamic Hierarchy Policy
- Navigate to Dynamic Hierarchies > Policies.
- Click the + button to create a new hierarchy policy.
- In the new policy configuration screen, fill in the following:
- Policy Type: Person Attribute Management Role
- Policy Name: Employee Type Management Roles
- Directory: EmpowerID (Management Roles are created in EmpowerID's internal system)
2. Enable Policy Processing
- Enable Hierarchy Generation.
- Set the Generation Interval to 5 minutes for lab testing purposes.
- Enable Membership Recalculation.
- Set the Recalculation Interval to 5 minutes as well.
3. Define Role Creation Parameters
- In the Attribute Name field, search for and select Employee Type.
- In the Naming Convention, enter:
{Value1} Employee Type Role
- This will generate roles like
Internal Employee Type Role
,Contractor Employee Type Role
, etc.
- This will generate roles like
4. Configure Role Behavior
- Leave the Empty Role Action as No Action (empty roles will not be deleted or modified).
- Leave the Management Role Definition field blank (we are not associating predefined role behavior).
- Leave alerting and other advanced options disabled.
5. Save the Policy
- Click Save to commit the policy.
- Return to the Policies list to monitor the status.
Monitoring and Verification
1. Wait for Processing to Complete
- Allow 5–10 minutes for the hierarchy generation and membership jobs to run.
- Refresh the Policies list to check the Generation Status and Membership Status columns.
2. Verify Roles Were Created
- Go to Dynamic Hierarchies > Inbox to see the generated records.
- You should see roles such as:
Internal Employee Type Role
External Employee Type Role
Contractor Employee Type Role
3. Review in Role Management
- Navigate to Role Management > Management Roles.
- Search for
Employee Type
. - Confirm that:
- Roles exist with the names specified.
- Each role has a description indicating creation by the policy (e.g., "Created by dynamic hierarchy policy Employee Type Management Roles").
Notes
- Dynamic hierarchy policies simplify role-based management by automatically generating and populating roles based on Person attributes.
- Employee Type is ideal for distinguishing between internal, external, and contract personnel.
- Adjust job intervals for production environments to balance performance and responsiveness.
Completion
Once the management roles are created and populated based on Employee Type, and you have confirmed their presence and accuracy, this lab is complete. Continue to the next lab to build on your EmpowerID dynamic hierarchy skills.