Hitachi ID Group Manager -- available both stand-alone or as a module included in Hitachi ID Identity Manager -- streamlines the process of managing security groups on Active Directory with:
A shell extension is included with _PRODUCT which can be deployed on Windows PCs. If installed, this component can intercept Windows "access denied" error messages and present an expanded message which allows users to open a web browser to the _PRODUCT application, where they can request membership in the appropriate AD group.
A similar mechanism is provided for SharePoint sites, but only requires a few lines of ASP code on each SharePoint server.
Alternately, users can navigate directly to the Group Manager web portal, which presents a view of shares and folders similar to Windows Explorer. Users can select the share, folder or printer in which they are interested and request membership in the appropriate group.
When users select a network resource, Group Manager presents several options:
With these options, Group Manager guides users to a selection of the appropriate resource and group.
All change requests processed by Group Manager are subject to an authorization process before being completed. By default, group owners are invited to approve all changes, but this routing can be replaced or augmented as required.
The _PRODUCT workflow engine is designed to get quick and reliable feedback from groups of business users, who may be individually unreliable. This is accomplished with:
Group Manager includes a rich set of built-in reports, designed to answer a variety of questions, such as: