The Group Expansion connector will crawl and expand identities from the Identity Cache
The Group Expansion connector can crawl and expand identities from the Identity Cache. The Identity Cache is part of Aspire crawl state database. Typically Elastic Search is used as a repository for crawl state database and the Identity Cache is stored in the index aspire-identitycache. The Identity Cache serves connectors as a storage for their identities like groups and users. For example we can find LDAP users and groups, Confluence users and groups etc in the Identity Cache. The purpose of Group Expansion Connector is to crawl identities for required seeds, do group expansion and publish the expanded identities. The connector also supports custom mapping configuration for selected seeds.
Let us use this example. If the user User1 is part of the group Grp1 and the group Grp1 is part of the group Grp0 then the result of the group expansion is updated information for the user User1. Instead of just having the group Grp1 in the user information we will have now the list of 2 groups - Grp1, Grp0 - there. This is what expanding groups means.
Some seeds require custom mapping for key attribute names. For example we may need to map an user name coming from Confluence connector to the standard AD name. We support two kinds of mapping:
The Group Expansion connector crawls identities from the identity cache. The Identity Cache is part of Aspire crawl state database. Typically Elastic Search is used as a repository for crawl state database and the Identity Cache is stored in the index aspire-identitycache.
Not relevant here
No special requirements here
|Snapshot-based Incremental s||yes|
|Non-snapshot-based Incremental s||no|
The Group Expansion connector has the following features:
The Group Expansion connector is able to crawl the following objects:
|Name||Type||Relevant Metadata||Content Fetch & Extraction||Description|
|Seed||container||NA||The identities are grouped by seeds and we crawl identities belonging to seeds|
|Identity||NA||The identities with expanded groups|
No limitations defined