Child pages
  • Membership UI Advanced Options
Skip to end of metadata
Go to start of metadata

Membership UI Advanced Options

In Grouper 2.4.0 with grouper_v2_4_0_api_patch_25 and grouper_v2_4_0_ui_patch_11, there's a new Advanced button when viewing a group's members.  This allows additional features - custom composites, enabled/disabled dates, and point in time audit queries.

Also, as of grouper_v2_4_0_ui_patch_20, the UI has a page that allows you to see all the group memberships under a folder.  And the same features exist there as well.  This can be accessed under the "More" tab when viewing a folder.

Custom composites

There's a new feature that allows you to perform a custom composite on a membership list.  This can help with use cases involving attestation, auditing and deprovisioning.  So for example, you can quickly and easily see all the users in your group who are not employees (without actually creating another composite group).  This requires configuration in grouper.properties and grouper.text.en.us.properties.  For example:


grouper.properties:

# {valueType: "string", regex: "^grouper\\.membership\\.customComposite\\.uiKey\\.\\d+$"}
grouper.membership.customComposite.uiKey.0 = customCompositeMinusEmployees
# {valueType: "string", regex: "^grouper\\.membership\\.customComposite\\.compositeType\\.\\d+$"}
grouper.membership.customComposite.compositeType.0 = complement
# {valueType: "group", regex: "^grouper\\.membership\\.customComposite\\.groupName\\.\\d+$"}
grouper.membership.customComposite.groupName.0 = ref:activeEmployees

# {valueType: "string", regex: "^grouper\\.membership\\.customComposite\\.uiKey\\.\\d+$"}
grouper.membership.customComposite.uiKey.1 = customCompositeIntersectIt
# {valueType: "string", regex: "^grouper\\.membership\\.customComposite\\.compositeType\\.\\d+$"}
grouper.membership.customComposite.compositeType.1 = intersection
# {valueType: "group", regex: "^grouper\\.membership\\.customComposite\\.groupName\\.\\d+$"}
grouper.membership.customComposite.groupName.1 = org:centralIt:staff:itStaff


grouper.text.en.us.properties:

customCompositeMinusEmployees = Members who are not employees
customCompositeIntersectIt = Members who are IT people


 

 


Enabled/disabled dates

Previously, the Grouper UI had an issue where if a membership was disabled, then that membership wouldn't be visible in the UI.  A disabled membership could exist because the start date is in the future or if there's a disabled date in the past.  The UI now exposes this information.



Note that this view is only currently available for direct memberships.  Indirect memberships are more complicated since they can involve multiple enabled/disabled dates.  However, now if you trace an indirect membership, it will show you if any enabled/disabled dates exist on each of the memberships in the path.

Point in time audit queries

Grouper has had point in time auditing since v2.0 but none of that information has been exposed in the UI.  It's only been available through web services, GSH, and direct database queries.  There's now basic information available (and likely more to come later).



Show and filter group memberships under a folder


New option under "More"


You can see all the group memberships under the folder there.  And you have the same filtering options.  For example, now you can quickly/easily find all the memberships that don't belong to employees.




  • No labels