eAdm for applikasjonsadministratorer: Er dette nyttig for meg?
This article outlines the possibilities within eAdm to simplify your role as an application or system manager. eAdm can and should automate routine tasks, freeing you to concentrate on other priorities. We have divided the possibilities into four levels, with an increasing degree of automation.
Level 1: Automated Notifications and Orders
eAdm can automatically send you a notification or an access order whenever an employee is granted a right in eAdm. This works whether the access is assigned automatically by rules or manually by a manager. For example, when a new employee is granted access to the patient journal system Cosdoc, an email alert can be sent to the application manager. Similarly, eAdm can notify you when a user is set to lose access.
This capability works for all systems, including those not on our official integration list. Simply tell us what the notification should contain, when it should be sent, and who should receive it, and we can configure it.
Level 2: Automated Enrollment in Access Groups
eAdm can manage user enrollment in access groups across on-premise Active Directory (AD), Azure AD, and Google Workspace. This is useful if your organization uses access groups to control application access, for example, making a Citrix login icon appear on a user's desktop only when they are a member of the correct group.
This can be combined with other notifications, such as an email to a manager listing the access a new employee has been granted automatically. eAdm can also enforce rules to remove access based on inactivity, for instance, revoking Citrix access if a user hasn't logged in for 30 days.
Level 3: Automated User Provisioning
In many cases, eAdm can create, maintain, and deactivate accounts directly in your application. This depends on the application's ability to receive user data, either through a one-way file transfer (like CSV/XML) or a two-way API connection.
For example, when user data is received from HR, eAdm can synchronize it to an application like Compilo, ensuring the user account is kept up-to-date. If the employee resigns, the user account in the application is automatically deactivated. We can also apply filters to control which users are exported, such as "only permanent employees" or "all staff in the Health department, excluding kitchen staff."
Level 4: Automated Access Management
When an API-based integration is possible, eAdm can often manage not only user accounts but also the specific permissions those users have within the application.
For example, in the case management system Public360, eAdm can use rules to automatically assign "Manager" or "Case Handler" roles. These rules can be very precise, granting access only when multiple criteria are met, such as combining job title ("Consultant"), department ("Medical Office"), and employment type ("Permanent"). This ensures access is tightly and automatically controlled based on an employee's current role and placement.
FAQ: Can My Application Be Managed by eAdm?
The level of possible automation depends on the application. Generally, modern cloud-based systems offer more integration possibilities than older, on-premise applications.
We maintain a list of all applications our customers use and their integration capabilities: Supported System Integrations.
Here is how the automation levels map to the integration types on that list:
Level 1 (Notifications): Possible for all systems, even those not on the list.
Level 2 (Group Enrollment): Possible for systems marked with AD, Azure AD, or Google.
Level 3 (User Provisioning): Possible for systems marked with API, CSV, or XML.
Level 4 (Access Management): Possible for systems marked with API.
What If My Application Isn't on the List?
We can still help! We are actively developing 1-2 new integrations per month and are always looking to expand our library.
Please contact salg@identum.no, and we will investigate the possibilities for your system.