Introduction
Grouper is an application used for managing lists of people. The web interface allows adding and removing group memberships, either individually or in bulk.
About Grouper: https://incommon.org/software/grouper/
Grouper Web interface: https://grouper.wesleyan.edu/
WesPortal link: Security bucket -> Grouper Access Management
In this article:
- Adding and remove group members
- Bulk import a list of members
- Institutional data (pre-defined populations)
- Advanced operations (custom Org folder)
Instructions
Add a group member
From the group's page where you have access to manage memberships:
- Click the + Add Members button located in the top-right corner to expand the page.
- Search for the person's name, email, or WesID.
- Highlight and click the search result to choose the individual.
- Click the Add button to confirm.
Remove a group member
From the group's Members tab:
- If needed, filter by the Member name field to find the individual.
- Check the box next to their name to choose them.
- Click Remove selected members to remove the person.
Note: If the checkbox is un-selectable, (greyed out) it's membership is indirect and granted through a nested group. You must run the Actions -> Trace membership process on the membership to see which nested group it is a part of, then modify the group nesting structure accordingly.
Bulk import a list of members
From the Group actions -> Manage \ Import members action.
- Choose the Copy/past a list of member IDs to expand the Enter member IDs textbox. Optionally, you may upload a file using the Import a file option.
- Paste in the list of email addresses or WesIDs to the Enter member IDs box.
- If there are less then 50 entries, you may choose the Validate entities button verify these are valid emails or WesIDs.
- Optionally, choose either Replace/Remove option accordingly.
- Replace existing members?: Remove all pre-existing group members and add this new list.
- Remove members? Remove pre-existing group members from this list.
- Click Submit to complete the import.
Institutional Data Groups (pre-defined populations)
Institutional data made available to employees:
General populations: (University Affiliation)
- Employee: all employees and related personnel (Trustees, emeriti, etc.).
Wesleyan:ref:Affiliations:Employee (University Affiliation) - Student: all enrolled and returning students.
Wesleyan:ref:Affiliations:Student (University Affiliation) - Member: combined Employee and Student affiliations.
Wesleyan:ref:Affiliations:Member (University Affiliation)
Database populations:
- Workday Cost Center: employee cost centers.
Wesleyan:basis:Workday:Cost Center - Workday Academic Unit: employees with teaching appointments.
Wesleyan:basis:Workday:Academic Unit - Departments: combined Cost Center(s) and related Academic Unit(s), as defined by ITS.
Wesleyan:basis:Workday:Departments - Workday Supervisory Organization: employees who report to the same manager.
Wesleyan:basis:Workday:Supervisory Org - SFIS Courses: instructors and their enrolled students.
Wesleyan:basis:PeopleSoft:CS:Course Roles- *Limited access to instructors only. Instructors may expose the groups to colleagues (for use in Grouper) by adding them to their course's READ group.
*Workday:
- Includes all staff, faculty, temporary staff and affiliates (contingent workers), and emeritus faculty.
- Does not include student employees.
Levels of group management
- View-only access to export list members:
- Check on memberships of a specific lists. Group members may be exported as CSV files from the Group actions -> Export members menu option.
- Add and remove individual access:
- Give individuals direct access to specific IT resources (e.g. Dragon file shares)
- Add/remove data groups:
- Give IT resource access to one or more institutional populations (defined above)
- (Available upon request) Custom populations people defined by database query.
- Manage custom groups: (Available upon request)
- Administer a dedicated Grouper folder. See the Advanced operations section below.
Advanced operations (Grouper Orgs)
Employees may request a dedicated organizational (Org) folder in Grouper for the ability to create and manage their own groups as needed. Org groups may be added as nested group members to existing IT Resource groups, (managed by ITS) linked to one or more applications.
For new Org folder requests, a ticket should be submitted ITS with the desired folder name and a description of it's purpose. The Org name will be a path name reference and discoverable from the Add members search field.
See the full PDF guide below for detailed Grouper instructions, including:
- Creating, editing, and deleting groups
- Exporting all group members to a CSV file
- Tracing memberships of nested groups
- Viewing the audit history for a group