As a HelloID admin, I want HelloID to recognize when a membership in Active Directory is already granted, so that redundant grant actions can be skipped during evaluation and give me a better evaluation forecast. Process Overview: Data Retrieval from Active Directory: Obtain data from the Active Directory target system, including permissions and memberships. Conversion to Granted Entitlements: Transform Active Directory permission data into granted entitlements for evaluation. Detailed Permissions Display: Display all permissions to be imported for each account, offering comprehensive insight. Import of Converted Data: Import the converted Active Directory account data as granted entitlements into the system. Evaluation Comparison: Contrast HelloID's desired state based on Business Rules (BR) with the current state in Active Directory. Benefits: Streamlined Evaluation: By importing existing Active Directory memberships and permissions, HelloID optimizes the evaluation process, enabling the system to skip redundant grant actions when memberships are already present. Clarity in Changes: This approach provides a clearer overview of actual changes in Active Directory during evaluation, facilitating better decision-making and management.
