Group Lifecycle Management

Without the ability to automate Group Lifecycle Management, the administration of groups and group memberships is a time consuming, manual, and often error prone process that can result in costly security and compliance failures. Because groups control access to often sensitive information – they are a favorite focus of auditors and compliance officers. When a membership change is overlooked or made in error. security and compliance goals are put in jeopardy. The result can be costly service desk calls, security breach, material findings and the loss of IT’s credibility with the organization.

The Group Lifecycle Management is comprised of several groups and group membership capabilities described below.

Cayosoft Dynamic Groups

Cayosoft Dynamic Groups are groups whose membership is automatically and dynamically determined with granular rules enforced by the Cayosoft Administrator Service. When users are added or updated in Active Directory, the rules are evaluated and as a result, users may be added or removed from these rule-based groups. That's why they are called Dynamic Groups.

Support On-premises Group Types

• Active Directory Security Group

• Active Directory Distribution Groups

• Microsoft Exchange Distribution Groups

Supported Online Group Types

• Azure Active Directory Security Group

• Azure Active Directory Distribution Groups

• Microsoft Online Exchange Distribution Groups

• Office 365 Unified Groups

Rule Types

• Include Queries – Specify members using query criteria so they will always be in the group.

• Excludes Queries – Specify users, groups or computer objects that should never be in the group.

• Static Includes – Specify members by name so they will always be in the group.

• Static Excludes – Specify members that should never be in the group.

Cayosoft Restricted Groups

Cayosoft Restricted Groups are groups with a set of granular membership rules that restrict membership of a group or set of groups. Unlike Dynamic Groups whose membership is determined automatically, restricted group's memberships are still maintained manually by traditional methods now subject to the restriction rules.

Support On-premises Group Types

• Active Directory Security Group

• Active Directory Distribution Groups

• Microsoft Exchange Distribution Groups

Cayosoft Self-Service Group Management

Another method to simplify Group Management is through end-user self-service. Self-Service Group Management empowers Application or Data owners to control their own groups without help desk assistance. Cayosoft Administrator provides a unified user self-service group management solution that both reduce service desk calls, but also improves the overall end-user experience.

Visibility and Reporting

At the heart of Cayosoft Administrator Group Management capabilities is data discovery. Cayosoft Administrator works by connecting and querying a source system like Active Directory, an Excel CSV file or a Cloud Application. Next Administrator filters, sorts and analyzes the information to determine if any action is needed.