Dynamic group

Introduction

IBM® Verify provides dynamic group functionality, allowing the evaluation of dynamic group membership based on conditions defined for the dynamic group and user profile attributes.

Dynamic groups manage their membership based on attribute-based rules. Unlike traditional static groups where administrators manually add or remove members, dynamic groups evaluate user attributes against defined conditions to include or exclude users accordingly. This provides a powerful way to manage dynamic group membership at scale while ensuring that access rights remain current as user attributes change.

Dynamic groups enhance the attribute-based access control (ABAC) capability by enabling groups that can be utilized in various Verify flows, similar to how static groups are used. They can be associated with applications, entitlements, and administrator roles to provide fine-grained access control based on user attributes such as department, location, job title, or any custom attributes defined in the user profile.

1. Dynamic group management
   Dynamic groups manage user membership based on profile attributes. Membership is determined by evaluating attribute-based conditions, ensuring users are added to or removed from dynamic groups as their profile attributes change. This keeps dynamic group membership accurate and up to date without requiring manual intervention.

💎

Ayushi Dewangan, IBM Security