How automatic assignment works
Bravura Security Fabric uses user classes and the autores
program to communicate with the Workflow Manager Service to automatically assign roles and groups:
Automatic assignment options are set in the resource’s Assignment tab.
During auto discovery , the
autores
program compares a list of users who are members of a user class with a list of users who are assigned the resource.The program submits a request to add the resource if a user class member is found to be in deficit. The program can be configured to submit a request to remove the resource from a user if they are found to be in surplus.
When a user submits a request that affects user class membership (an attribute or group membership is changed), potential automatic assignments are detected and submitted once the initial request has been approved and processed.
Only direct group memberships are counted when calculating deficits and surpluses. The
autores
program will not submit requests to remove indirect group memberships.