Working with Authorizations Version 2.0 ADAM Training Session

4.2 What is an Authorization? An Authorization is:  The ability to perform specific actions within an application  Performed by an Authorization Grantor

4.3 Key Components of an Authorization End UserOrganizationProfile Implies Application Authorization Grantor

4.4 Authorization Scenario – Part A Jack Black is an Authorization Grantor for IAPP  Organization = Northern Weed Committee  Profile = Program Manager  Jack knows Clark Griswold requires authorization immediately

4.5 Authorization Scenario – Part B What can Jack do?  Authorize Jack logs on to ADAM as an Authorization Grantor for IAPP Jack completes the following authorization for Clark Griswold Grant UserCGRISWOLD Access to ProfileIAPP_PROGRAM_MANAGER For OrganizationNorthern Weed Committee Effective DateImmediately Expiry DateNever Expires EnabledYes

4.6 Authorization Access in ADAM Jill = Application Administrator Jack = Authorization Grantor Clark = End User

4.7 Demo Demonstration of:  Add Authorization

4.8 Add an Authorization (cont.) Tips  For the Organization Field: If the content of the field is missing or blank then verify acceptance of E-Agreements  The “Enabled” check box must be ticked for the authorization to be active as of the Effective Date  Comments can be seen by others  End User receives notification of authorization

4.9 Add a Group Authorization What is a Group Authorization?  Allows Authorization Grantor to create an authorization applicable to a group of users (i.e. all IDIR or all BCeID Users)  Authorization Grantor must have been granted ability to create Group Authorizations

4.10 Add a Group Authorization (cont.) How do I add a Group Authorization?  On New Authorization page: Set “Grant Type = Group” Use “Grant Group” field to select group of users Note: You can not modify the composition of the group  Upon successful authorization, all users of the group will have the authorization

4.11 Add a Batch Authorization What if I have many identical Authorizations to create?  ADAM has a Batch Authorization page  Allows: Entry of multiple identical authorizations; or File upload of multiple authorizations

4.12 Add a Batch Authorization (cont.) Batch Authorization Details  Similar fields to a single authorization  May enter multiple: Users Organizations Profiles It is highly recommended that Batch Authorizations are either for profiles secured by organization or those which are not secured by organization. Do not attempt to mix both types of profiles in a batch.

4.13 Demo Demonstration of:  Add Batch Authorization

4.14 Add a Batch Authorization (cont.) Tips  Authorization Process Confirmation page Examine each authorization  Is it approved?  Remove tick if you do not want to add the corresponding authorization  If the authorization is not approved by ADAM, you can roll your mouse over the authorization (blue text) and an explanation is displayed Use “Complete” button to add all selected authorizations End Users receive detailing Authorization

4.15 Recap – Types of Authorizations Authorization TypeDetails Single Authorization  1 User Authorized  1 Profile  1 Organization OR No Organization Group Authorization  1 Group of Users Authorized  1 Profile  1 Organization or No Organization Batch Authorization  1 or Multiple Users Authorized  1 or many Profiles  1 or many Organization(s) or No Organization Batch Group Authorization  1 or Multiple Groups of Users Authorized  1 or many Profiles  1 or many Organization(s) or No Organization

4.16 Manage Authorizations Manage Authorizations page allows a Search for an authorization View authorizations Edit authorizations There can be more than one Authorization Grantor with the same delegation You can view/update authorizations which you did not create if you have the same authorization abilities Update Authorization page Modify details of an authorization Examine authorization history Delete authorization

4.17 Demo Demonstration of:  Manage Authorizations

4.18 Manage Authorizations (cont.) Tips  Do not delete an authorization unless you are sure you want to delete it from ADAM Use the enable checkbox (remove the tick) to temporarily disable the authorization Once you have deleted an authorization, you will still be able to see it on the Manage Authorizations page (for historical purposes only) Next Presentation: Understanding ADAM Agreements