ucdavis/roles-management

Ability to import people from DW/IAM, not just augment them

Closed this issue · 1 comments

Ability to import people from DW/IAM, not just augment them

(From Jeremy about how to track departments for import:)

Short answer: Yes, using the PPS Associations query keying off the deptCode field should do for now.

Less-short answer:

With the switch to IAM, we have richer data available to us than with LDAP. Long-term, I think we’ll want to use that to our advantage. Here are some examples that we may want to integrate in the future:

· The PPS Associations include three department code fields, each of which maps to something slightly different. In the future, we may want to iterate through all three of these to ensure we’re getting everyone:
o deptCode: I believe this is the Home Department Code in PPS, which is the department of the individual’s “primary” appointment.
o adminDeptCode: I believe this is the Alternate Home Department Code in PPS, which is used to grant access for managing the individual in PPS to a department other than their primary department, e.g., when someone is split across two colleges and both need access to the person’s PPS records.
o apptDeptCode: I believe this is calculated field based on a mapping between PPS Department Codes and KFS “orgs” that basically indicates which department is paying for the specific appointment.
· While we’ll still need to key off of department codes for some departments such as NEAT, which is not really in our division, another strategy would be to key off of the bouOrgId for our division. That would presumably automatically pull in any new DSS departments that get added in the future.
· IAM also has student data.
o At the very least, it would be good to pull in all graduate students in our departments. Since most grad students are also employed by us, we’re getting most of them from PPS already. But any who are not employed may not be pulled in now.
o I can see potential new use cases for RM for managing access to resources for undergraduate majors in our departments (Sympa mailing lists for majors being a really good example).