Access automation for new hires

[Ramya Neelam1]

Hi,

Could anyone please provide few ideas on how to automate Access for a new employees using HRSD application?

Access is nothing but when a user records gets created from Active Directory to service now, based on user's department need to add him to the respective Assignment groups automatically.

Thanks in advance.

[sachin_namjoshi]

We have built an integration with workday. When user is onboarded in workday, WD consumes ServiceNow REST APIs which creates users and provides AD group mappings for each user which depends on their department.

Actions in this flow add users to different AD groups. Each AD group memberships gives access them to different enterprise applications based on their personas.

Regards,

Sachin

[Ramya Neelam1]

Hi Sachin

Thanks for your response.

But here in my requirement user gets added to user table through Active directory, so user is available and will write a schedule job to fetch user data automatically. I would like to know if this Adding users to groups based on their departments and this whole process/flow can be done using HRSD application as I have seen somewhere that for employee onboarding/offboarding many are using this Enterprise and onboarding transitions module in HRSD.

[sachin_namjoshi]

employee onboarding/offboarding capability of HRSD provides below functions for lifecycle events for users:

- provision employee equipments like laptop, mobile etc

- register employee benefits like health etc

You will need to write custom functionality to achieve your requirement. You can build an integration like i mentioned earlier or you can build a flow designer flow on sys_user table to add user to group based on departments.

Regards,

Sachin

[Susan Britt]

Hi @Ramya Neelam 

Yes, you can automate the group membership as part of the onboarding lifecycle event.  How it's done will be based on your security/compliance, subscriptions, and AD setup.  For example, does group membership come from AD.  If so, the AD integration can automatically add users to the necessary groups based on department or any other criteria (e.g., job role).  If group membership is not done by AD, you can automate it based on script (e.g., Business Rule, Transform Map) to add the user to the appropriate groups.  Your setup would need to be able to accommodate systematically finding the right group name to add the user to based on their department.  If the data is there to determine this, it can be done.