Grouper

Owned by mhodges
Last updated: Jul 20, 2022
3 min read

It is recommended that you use UH Groupings rather than Grouper.  UH Groupings provides additional functionality and is simpler to manage.

Confused about UH Groupings vs. Grouper?

Do not confuse Grouper with UH Groupings.  UH Groupings is our layer on top of Internet2's Grouper where we expand the concept of a group into a grouping and make useful data available via the UH Group Store

Overview

Grouper maintains a repository of groups of people.  It offers automatic groups which are regularly updated from official sources such as Banner, PeopleSoft, RCUH, SECE and UHIMS. There are also custom groups which anyone can create.  Custom groups can have ad hoc members, can reference other groups (automatic or custom), or it can be any combination of these.  Even automatic groups can be a combination of other automatic groups.   Applications can use Grouper to manage authorizations or any other feature that would benefit from managing groups of people.

Production URL: https://grouper.hawaii.edu/

Automatic groups include students, faculty and staff, collectively and also per campus.  As people change status, their group memberships will change accordingly.  Applications that reference these groups will always have accurate information since UHIMS has connections to Banner, PeopleSoft HR, etc.  Some applications will benefit from referencing the automatic groups for role-based-access-control (RBAC).  If a person is not in the group, access can be denied or restricted.  Automatic groups organized by EAC are also available.   More recently, groups organized by academic program and course registration have also been added.  Refer to the UH Group Store to see what is available.

Features and Benefits:

  • Grouper provides foundational functionality:
    • Define your group once and use it to:
      1. Create and manage the group of people who are allowed to access your application or system.
      2. Integrate Grouper with your application so that membership in your group equates to authorization.
    • Take advantage of the depth and breadth of our automatically populated groups.
  • It is highly recommended that you use UH Groupings to take advantage of additional group functionality:
    • Most groups are made up of a combination of a well-defined population plus some exceptions for inclusion and/or exclusion. UH Groupings models this behavior and makes it easy to use.
    • Use UH Grouping's LISTSERV release feature so that your group can be used for access control with CAS.
    • Use UH Grouping's LISTSERV sync feature so that your group is automatically synchronized with a LISTSERV mailing list
    • Use UH Grouping's term transition feature to automatically change the group membership when semesters change.
    • Use the UH Grouping's lifecycle feature so that you receive email when a person in your group leaves or changes position, for example, if authorizations need to be revoked.
      • It is very easy to grant access to someone, but it is even easier to forget to remove such access when the person is no longer authorized. UH Groupings can provide that reminder when someone in the group has left or changed positions
      • If an email notification is not appropriate (e.g. need real-time message for automatic deprovisioning), use the UH Message Broker instead. The underlying events that cause a person to enter or leave a group are available as a message.

Getting Started with Grouper

About the Data in Grouper

References