Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Users of Grouper sometimes need to create and manage entities in Grouper which are not part of a central subject source. An example is where Grouper integrates with an external database that has schemas needed for access management. These schemas must be represented in Grouper so they can be assigned to Groups/Roles/Permissions. Before Grouper 2.1 this could be solved by creating a Group to represent the entity, and not assign assigning members to the group.  In Grouper 2.1 an "entity" can be created in the folder structure.

...

  • id - uuid, doesn't change
  • extension - system name in the folder, shouldnt shouldn't change
  • display extension - display name in the folder, can change
  • description - free form text documentation about the entity
  • name - fully qualified (including parent folders) system name
  • display name - fully qualified (including parent folders) display name
  • subjectIdentifier attribute - if the identifier of the entity is not valid for the extension (e.g. if it could contain a colon, or other invalid character in the grouper extension namespace), then you can put any fully qualified (including folder names) identifier here.  Note, no two entities can have the same subjectIdentifier.  Also, this attribute is public, meaning anyone can read (if they can VIEW the entity), or update it (if the can ADMIN the entity)

...