Created with by Chris Hyzer with help from AI via commercially licensed versions of ChatGPT, Suno, Visla, and Camtasia.
This is a teaser for a deprovisioning blog which will be ready soon.
############## INTRO ################## I got a ticket in my hand, someone's knockin' at the door, They need access to the system, just like others before. I'll hand it out, no problem, that's the easy part, But when they leave, their access, is still hangin' in the dark. Oh, the closet's gettin' full, unneeded items in the drawers, But it's time to clean it out, gotta do the chores. Access left unchecked, it’s startin' to overflow, Gotta deprovision now, since it’ll never slow. Five percent's invalid, maybe twenty at the most, People changing jobs, but the access stays like ghosts. Affiliations lost, but no one reviews the store, Now we’re stuck with clutter, like a hoarder’s nevermore. So I’ll do it like Slim Shady, clean it up with style, Access will be proper, and I’ll be free for a while. No more buried treasure, no more ancient keys, Valid access flows just like a summer breeze. #################################### Blocking access isnt enough You can block me out, you can shut me down, But underneath, I'm still around. Old permissions, have not gone away, Hire me back, my access is back in play. Blocking’s cool, but it's just one part, It doesn’t clear the system’s heart. Deprovisioning what we need to do, Remove the roles, start anew. Losing my access isn’t the mission, 'Cause blocking me out does not deprovision. I’ve got stale entitlements from long ago, If I return, they'll wrongly show. Composite intersections, not enough, Clearing the roles, that’s the tough stuff. Blocking’s cool, but it's just one part, It doesn’t clear the system’s heart. Deprovisioning what we need to do, Remove the roles, start anew. Losing my access isn’t the mission, 'Cause blocking me out does not deprovision. So clean it up, don’t let it slide, Deprovisioning is the real guide. ############################# attestation You get that email every now and then, Time to check the group, time to hit send. But some folks, yeah, they don't play fair, Filter it to spam like they don’t care. Attestation, it’s more than a click, Gotta check the names, don’t do it quick. Ignoring the message, well, that’s a shame, "Attested" without looking, losing the game. Attestation with teeth, that's what we need, Motivation to do what you agreed. Some don’t collaborate, emails just pass, Click “attested” without looking fast. But we need a change, a little more force, Disable the group if you stray from the course. So next time it comes, don’t turn away, Review the group, don't just delay. ################ Subject source There’s a thing called source restrictions Helps with de-provisioning afflictions When only active folks remain, The system clears some of the pain. But oh, the questions start to fly, Who stays, who goes, and why? Grouper U.S.D.U. cleans the slate, Takes memberships off the plate. But who's in the population? At what point’s the termination? With grace periods in the mix, It’s a puzzle we can’t fix. Gotta tread with caution, my friend, Where does this rabbit hole end? Ex-employees, vacation paid? Retired folks, should access fade? Do alums still hold a key? Who decides what will or won’t be free? And grace periods, well, they seem kind, But they’re thorns in the design. Half the world includes them all, Half just lets the others fall. Put your gloves on, tread with care, You’ll find thorns everywhere. Grouper U.S.D.U. does the trick, But this road ain’t ever quick. Who’s de-provisionable, who’s not? That’s the question we all got! ##################### Rules When access rules are set just right, You can manage memberships day and night. Grouper steps in when changes appear, Lifecycle shifts, we make it clear. Switch departments, or leave the place, We’ve got a plan, no time to waste. Rules for access, smooth and clean, Deprovision like a dream. Remove the user, set a date, Notifications don’t come late. Grouper’s here to keep it tight, Managing access day and night. Used to be a bumpy ride, Raw attributes, no place to hide. But version 5, it’s shining bright, With a UI, end users in sight. Patterns set and delegation, No tickets or complication. Memberships with end dates clear, Auto-added, no more fear. Grace periods to ease the flow, Deprovision when it’s time to go. ######################## Membership eligibility Membership eligibility, the future's here, Grouper's rules are crystal clear. Coarse-grained checks, they hold the line, Veto bad users, they can't slip by. Automatic removals, we got that too, The closet’s clean, all shiny and new! Eligibility’s the name of the game, Keeping access sharp and sane. No more drift, no more guess, Grouper’s handling the rest. With lifecycle events in view, Deprovisioning’s easier to do! This is the start, tip of iceberg, Many ideas still yet to emerge. Assigning access, Grouper’s ace, But we’re heading for a cleaner space. Capture the lifecycle, clear the way, Access reports will save the day! Future’s bright, and the rules will grow, Access cleaned like freshly fallen snow. Highlight suspect rights with ease, Grouper’s here to please! Membership eligibility, it’s just begun, Grouper’s journey has only begun to run. Lots of future ideas ideas, we rise above, Automating access with care and love! ############################## Basis and reference groups Automatic populations, they ease the load, Less manual work, let the system unfold. With reference groups in a vast array, Access control gets better every day. No need for manual tweaks and strife, Let Grouper simplify your life! Reference groups, they’ve got your back, Basis groups pick up the slack. Fewer assignments, deprovisioning is smooth, Grouper’s here to help you groove. It can help convert to automated flow, People lose access when they leave tomorrow. Admins build reference groups on demand, For apps and needs across the land. Pay attention to what they seek, Add more groups when requirements peak. If most won’t be used, that’s fine for now, Automate a subset of them anyhow. From org groups to affiliations wide, Supervisory groups, they’re on your side. A manual group can shift and blend, Let Grouper guide it to the end. Automatic populations, a brighter day, Access control the Grouper way. With each new group, the work gets light, Deprovisioning done just right! ################################# Auditing Auditing access, it’s time to see, Who’s got the keys, who’s running free. Provisioning flows, sets it all right, But deprovisioning clears the night. Removing access, when it’s done, Keeps the system tight, second to none. Audit the access, check who’s in, Grouper helps the work begin. Provisioning flows data, deprovisioning clears, Managing access, quieting fears. Mature the system, keep it tight, Audit the paths, shine the light. External audits, they lead the way, With solid practices every day. Internal checks can do some good, If your org can stomach it like it should. Attestation is an idealist's plan, Audit the attestation makes sure it happens. Provisioning sets the data flow, Deprovisioning is where you need to go. Top of mind for admins keen, Audit ensures the system is clean. Auditing access, it’s the key, Deprovisioning done properly. Grouper’s here to help you through, Doing it right, with less to do. ###################### Disconnected systems Got some disconnected systems, not tied in, Grouper’s still a way to win. Isn't provisioned? Don’t despair, There’s a way to make it fair. Manually export the user list, Know who is gone with a Grouper assist. Disconnected, but Grouper’s here, Helping deprovision, making it clear. Even when the system’s out, Grouper shows what it’s about. Generate reports, match the names, Keeping access in the game! Email identifiers making it tough, Identity matching, yeah, it’s rough. Leverage G.S.H. templates to run the check, Pulling the data, keeping it in spec. Even if it’s not the system of record, Grouper’s tools can still be offered. With a central place for all access flows, Even the disconnected service owner knows. Users leaving, switching jobs, Confusing some, but to Grouper its obvs. Disconnected, doesn’t mean no hope, Grouper’s here, helping you cope. Access clean, in one big sweep, Even systems not plugged in too deep!