working with authorizations version 2.0 adam training session

18
Working with Authorizations Version 2.0 ADAM Training Session

Upload: annice-simpson

Post on 04-Jan-2016

217 views

Category:

Documents


3 download

TRANSCRIPT

Page 1: Working with Authorizations Version 2.0 ADAM Training Session

Working with AuthorizationsWorking with Authorizations

Version 2.0Version 2.0

ADAM Training SessionADAM Training Session

Page 2: Working with Authorizations Version 2.0 ADAM Training Session

4.2

What is an Authorization?What is an Authorization?

An Authorization is: The ability to perform specific actions

within an application Performed by an Authorization Grantor

Page 3: Working with Authorizations Version 2.0 ADAM Training Session

4.3

Key Components of an AuthorizationKey Components of an Authorization

End User Organization Profile Implies

Application

Authorization Grantor

Page 4: Working with Authorizations Version 2.0 ADAM Training Session

4.4

Authorization Scenario – Part AAuthorization Scenario – Part A

Jack Black is an Authorization Grantor for IAPP

Organization = Northern Weed Committee

Profile = Program Manager Jack knows Clark Griswold requires

authorization immediately

Page 5: Working with Authorizations Version 2.0 ADAM Training Session

4.5

Authorization Scenario – Part BAuthorization Scenario – Part B

What can Jack do? Authorize• Jack logs on to ADAM as an Authorization

Grantor for IAPP• Jack completes the following authorization

for Clark GriswoldGrant User CGRISWOLD

Access to Profile IAPP_PROGRAM_MANAGER

For Organization Northern Weed Committee

Effective Date Immediately

Expiry Date Never Expires

Enabled Yes

Page 6: Working with Authorizations Version 2.0 ADAM Training Session

4.6

Authorization Access in ADAMAuthorization Access in ADAM

Jill = Application Administrator

Jack = Authorization Grantor

Clark = End User

Page 7: Working with Authorizations Version 2.0 ADAM Training Session

4.7

DemoDemo

Demonstration of: Add Authorization

Page 8: Working with Authorizations Version 2.0 ADAM Training Session

4.8

Add an Authorization (cont.)Add an Authorization (cont.)

Tips For the Organization Field:• If the content of the field is missing or blank

then verify acceptance of E-Agreements The “Enabled” check box must be ticked

for the authorization to be active as of the Effective Date

Comments can be seen by others End User receives email notification of

authorization

Page 9: Working with Authorizations Version 2.0 ADAM Training Session

4.9

Add a Group AuthorizationAdd a Group Authorization

What is a Group Authorization? Allows Authorization Grantor to create

an authorization applicable to a group of users (i.e. all IDIR or all BCeID Users)

Authorization Grantor must have been granted ability to create Group Authorizations

Page 10: Working with Authorizations Version 2.0 ADAM Training Session

4.10

Add a Group Authorization (cont.)Add a Group Authorization (cont.)

How do I add a Group Authorization? On New Authorization page:• Set “Grant Type = Group”• Use “Grant Group” field to select group of

users• Note: You can not modify the composition

of the group

Upon successful authorization, all users of the group will have the authorization

Page 11: Working with Authorizations Version 2.0 ADAM Training Session

4.11

Add a Batch AuthorizationAdd a Batch Authorization

What if I have many identical Authorizations to create?

ADAM has a Batch Authorization page Allows:• Entry of multiple identical authorizations; or• File upload of multiple authorizations

Page 12: Working with Authorizations Version 2.0 ADAM Training Session

4.12

Add a Batch Authorization (cont.)Add a Batch Authorization (cont.)

Batch Authorization Details Similar fields to a single authorization May enter multiple:• Users• Organizations• Profiles

It is highly recommended that Batch Authorizations are either for profiles secured by organization or those which are not secured by organization. Do not attempt to mix both types of profiles in a batch.

Page 13: Working with Authorizations Version 2.0 ADAM Training Session

4.13

DemoDemo

Demonstration of: Add Batch Authorization

Page 14: Working with Authorizations Version 2.0 ADAM Training Session

4.14

Add a Batch Authorization (cont.)Add a Batch Authorization (cont.)

Tips Authorization Process Confirmation page• Examine each authorization

Is it approved? Remove tick if you do not want to add the

corresponding authorization If the authorization is not approved by ADAM, you can roll

your mouse over the authorization (blue text) and an explanation is displayed

• Use “Complete” button to add all selected authorizations• End Users receive email detailing

Authorization

Page 15: Working with Authorizations Version 2.0 ADAM Training Session

4.15

Recap – Types of AuthorizationsRecap – Types of Authorizations

Authorization Type DetailsSingle Authorization 1 User Authorized

1 Profile 1 Organization OR No Organization

Group Authorization 1 Group of Users Authorized 1 Profile 1 Organization or No Organization

Batch Authorization 1 or Multiple Users Authorized 1 or many Profiles 1 or many Organization(s) or No

Organization

Batch Group Authorization 1 or Multiple Groups of Users Authorized

1 or many Profiles 1 or many Organization(s) or No

Organization

Page 16: Working with Authorizations Version 2.0 ADAM Training Session

4.16

Manage AuthorizationsManage Authorizations

Manage Authorizations page allows a Search for an authorization

• View authorizations• Edit authorizations

There can be more than one Authorization Grantor with the same delegation

• You can view/update authorizations which you did not create if you have the same authorization abilities

Update Authorization page• Modify details of an authorization• Examine authorization history• Delete authorization

Page 17: Working with Authorizations Version 2.0 ADAM Training Session

4.17

DemoDemo

Demonstration of: Manage Authorizations

Page 18: Working with Authorizations Version 2.0 ADAM Training Session

4.18

Manage Authorizations (cont.)Manage Authorizations (cont.)

Tips Do not delete an authorization unless

you are sure you want to delete it from ADAM• Use the enable checkbox (remove the tick)

to temporarily disable the authorization• Once you have deleted an authorization, you

will still be able to see it on the Manage Authorizations page (for historical purposes only)

Next Presentation: Understanding ADAM Agreements