HitachiIDGroupManager manages Active Directory security by intercepting user attempts to access network resources and redirecting them to a web portal where they can self-service request appropriate group memberships, reducing IT support costs and improving user productivity; it integrates with various systems and begins by intercepting Windows "Access Denied" errors to guide users to request access via a web-based system subject to secure approval workflows.

1. ©2013HitachiIDSystems,Inc.Allrightsreserved.
Allothermarks,symbolsandtrademarksarethepropertyoftheirrespectiveowners.
HitachiIDGroupManager hitachi-id.com
Auditablesecurity,transparentchangecontrol
GroupManagercanreporton:
•WhichusersaremembersofgroupX?
•WhichgroupmembershipsdoesuserYhave?
•WhoauthorizedmembershipingroupZforuserW?
•WhendiduserAgainmembershipingroupB?
•WhorequestedandwhoauthorizedgroupBforuserA?
Reports
Offerhelpwhenusersfirstgetan“AccessDenied”error
WheninstalledonWindowsworkstations,thiscomponentreplacesthenative“accessdenied”
dialogwithonethatincludesalinktotheappropriateaccessrequestwebpage.
AWindowsShellExtension
Intuitivenavigationwithoutclientsoftware
Alternately,userscanfindtheirnetworkresourceusingaWindowsexplorer-likewebportalwithout
installinganysoftwareontheirPCs.
AWebBrowserViewofShares,FoldersandPrinters
Easytounderstandrequestsforaccess
Whenusersselectashareorfolder,GroupManagerpresentsappropriateaccessoptions:
•Groupsthathaverightstothatresource.
•Nestedgroups.
•Nestedresources(folders).
APortalThatGuidesUserstoAppropriateGroups
Changerequestsaresubjecttosecure,reliableapprovals
AuthorizationWorkflow
Requestsforgroupmembershipmustbeapprovedbeforebeingcompleted.Defaultroutingisto
groupownersbutcanbeextended.
Promptandreliableapprovalsareachievedby:
•Concurrentinvitationstomultipleapprovers.
•ApprovalbyXofYauthorizers.
•Automaticreminders.
•Escalation.
•Scheduleddelegation.•Scheduleddelegation.
Inmediumtolargeorganizations,managinguser
accesstonetworkresourcessuchassharesand
folderscanbeaslowbusinessprocess.The
resultislostproductivitywheneveruserschange
rolesorprojects.
LostProductivity
Thehelpdeskisinundatedwithcallsrequesting
access.Fewusersunderstandthesecurity
infrastructure,socallsusuallybeginwith“Igotan
accessdeniedmessage.”
TheprocessusuallyproceedsbyidentifyingtheTheprocessusuallyproceedsbyidentifyingthe
resourcethatthecallertriedtoaccess,finding
groupsthathavereadorwriterightstoit,finding
groupownersandverifyingthataccessforthe
callerisappropriate-allbeforegrantingaccess.
Thissequencecanbebothtime-consumingand
costly.
ITSupportCost
Challenges
HitachiIDGroupManagerreducesthecomplexity
ofgroupmanagementbyleveragingself-service.
Thisresultsinincreaseduserproductivityand
reducedsupportcosts.
ReturnonInvestment
HitachiIDGroupManager(includedwithHitachiIDIdentityManager)movesthe
responsibilityformanagingActiveDirectorygroupsfromITtousers.ItlowersIT
costsandimprovesuserservicebyinterceptinguserattemptstoaccess
networkresourcesandredirectinguserstoawebportalwheretheyrequest
appropriategroupmemberships.
ManagingActiveDirectorysecurity.

2. ©2013HitachiIDSystems,Inc.Allrightsreserved.
Allothermarks,symbolsandtrademarksarethepropertyoftheirrespectiveowners.
HitachiIDGroupManager 2
SharePoint
Groupware
Windows,Samba,NASappliances,CIFS,SMB
File/Print
Windows/ActiveDirectory
Directory
IncludedConnectors
IncidentManagementIntegrations
Automaticallycreate,updateandcloseticketson:
•AxiosAssyst •BMC/RemedyARS
•BMCSDE •CAUnicenter
•ClarifyeFrontOffice •FrontRangeHEAT
•HPServiceManager •NumaraTrack-IT!
•Symantec/Altiris •TivoliServiceDesk
•ServiceNow•ServiceNow
Additionalintegrationsviae-mail,ODBC,webservicesandweb
formsareavailable.
HitachiIDGroupManagerispartoftheHitachiIDManagement
Suite,whichalsoincludes:PasswordManagerforself-service
managementofauthenticationfactors,IdentityManagerforuser
provisioning,andPrivilegedAccessManagertosecure
administratorandserviceaccounts.
HitachiIDGroupManagerisavailableasastand-aloneproduct
andisincludedatnoadditionalcostwithHitachiIDIdentity
Manager.Manager.
Formoreinformation,pleasevisit:http://hitachi-id.com/
orcall:1.403.233.0740|1.877.386.0372
Readthisbrochureonline:
WindowsAccessDeniedErrorDialog
HitachiIDGroupManagerbeginsbyinterceptingtheWindows"AccessDenied"errordialogwindow
anddisplayingadditionalinformation--notablyabuttonthatlaunchestheuser'swebbrowsertoa
web-basedrequestsystem.
ApproveRequest
Theauthorizer(s)willreceivee-mailsaskingthemtoreviewtherequest.Theycanapprove,rejector
delegatethedecisiontosomeonemorefamiliarwiththesituation.