Hitachi ID Identity Manager includes a unique technology for managing user membership in security groups. This technology is called Hitachi ID Group Manager. You can learn more about Group Manager in its own web site: Hitachi-ID.com/group-manager.
Group Manager is a self-service group membership request portal. It allows users to request access to resources such as shares and folders, rather than initially specifying groups. Group Manager automatically maps requests to the appropriate security groups and invites group owners to approve or reject the proposed change.
Group Manager is available both as a stand-alone solution and as a no-cost module included with Identity Manager.
Group Manager -- available stand-alone and as a module in Identity Manager -- streamlines the process of managing security groups on Active Directory with:
A shell extension is included with Group Manager which can be deployed on Windows XP, Windows Vista/7/8 PCs. If installed, this component can intercept Windows "access denied" error messages and present an expanded message which allows users to open a web browser to the Group Manager application, where they can request membership in the appropriate AD group.
Alternately, users can navigate directly to the Group Manager web portal, which presents a view of shares and folders similar to Windows Explorer. Users can select the share, folder or printer in which they are interested and request membership in the appropriate group.
When users select a network resource, Group Manager presents several options:
With these options, Group Manager guides users to a selection of the appropriate resource and group.
All change requests processed by Group Manager are subject to an authorization process before being completed. By default, group owners are invited to approve all changes, but this routing can be replaced or augmented as required.
The built-in workflow engine is designed to get quick and reliable feedback from groups of business users, who may be individually unreliable. It supports:
Group Manager includes a rich set of built-in reports, designed to answer a variety of questions, such as:
Group Manager improves security by ensuring that changes to membership in security groups are properly authorized before being implemented.
Group Manager reduces the cost of IT support by moving requests and authorization for changes to group membership out of IT, to the community of business users.
Group Manager streamlines service delivery regarding the management of membership in security groups by making it easier for users to submit clear and appropriate change requests and automatically routing those requests to the right authorizers. This makes the request process painless and the approvals process fast.