Resource Pool Group is suitable approach in scenarios where there is a set of resources that is accessible for more than one user groups. Let us understand how Resource Pool Groups simplifies the administrator experience.
Consider Intech Data wants to secure the privileged access to few SSH resources and grant authorized access to user roles as follows:
Res1 shared with user groups - HR, Dev, and IT.
Res2 shared with Dev, IT and Finance.
Res3 shared with HR, Dev, and Finance
Res4 is common for all groups.
The following table describes how resource pool group reduces number of assignments, so managing assignments become convenient for the administrator:
|
Resource Pool |
User Roles |
Assignments Before Resource Pool Group |
Resource Pool Group |
Assignments with Resource Pool Group |
|---|---|---|---|---|
|
HR_RP |
UR_HR-DEV-IT |
HR_RP + UR_HR-DEV-IT |
HR-DEV-IT_RPG |
HR-DEV-IT_RPG + UR_HR-DEV-IT |
|
DEV_RP |
DEV_RP + UR_HR-DEV-IT |
|||
|
IT_RP |
IT_RP + UR_HR-DEV-IT |
|||
|
DEV_RP |
UR_DEV-IT-FIN |
DEV_RP + UR_DEV-IT-FIN |
DEV-IT-FIN_RPG |
DEV-IT-FIN_RPG + UR_DEV-IT-FIN |
|
IT_RP |
IT_RP + UR_DEV-IT-FIN |
|||
|
FIN_RP |
FIN_RP + UR_DEV-IT-FIN |
|||
|
HR_RP |
UR_HR-DEV-FIN |
HR_RP + UR_HR-DEV-FIN |
HR-DEV-FIN_RPG |
HR-DEV-FIN_RPG + UR_HR-DEV-FIN |
|
DEV_RP |
DEV_RP + UR_HR-DEV-FIN |
|||
|
FIN_RP |
FIN_RP + UR_HR-DEV-FIN |
|||
|
HR_RP |
UR_HR-DEV-IT-FIN |
HR_RP + UR_HR-DEV-IT-FIN |
HR-DEV-IT-FIN_RPG |
HR-DEV-IT-FIN_RPG + UR_HR-DEV-IT-FIN |
|
DEV_RP |
DEV_RP + UR_HR-DEV-IT-FIN |
|||
|
IT_RP |
IT_RP + UR_HR-DEV-IT-FIN |
|||
|
FIN_RP |
FIN_RP + UR_HR-DEV-IT-FIN |
NOTE:If you do not group these pools then it is required to create thirteen assignments. With grouping the pools, assignments that the administrator need to manage is four.