Ramon Schouten
Current Behavior
HelloID knows which users are resource owners or managers, but there is no way to automatically group these users. This means:
  • Resource owners and managers must be manually added to a group or role before they can be given access to anything
  • There is no standard, reusable way to reference "all resource owners" or "all managers"
  • Administrators must build and maintain custom solutions to keep these groups up to date
  • These custom solutions are not instant and add unnecessary maintenance overhead
Why this is a problem
Resource owners and managers need access to various HelloID features — such as processing recertification reports, reviewing managed products, or handling managed users — but they cannot get this access without a group to assign permissions to. Since HelloID already knows who these users are, manually maintaining these groups is redundant and error-prone.
Suggested Improvement
Automatically maintain a dynamic group that always contains the current set of resource owners, and a matching group for managers. These groups would:
  • Stay up to date automatically as users become or cease to be resource owners/managers
  • Be instantly available — no delays from scheduled tasks
  • Be reusable across different HelloID features: recertification, managed products, managed users, and any future functionality that needs to target resource owners or managers
  • Remove the need for administrators to build and maintain custom synchronization logic