Overview

Through a user-friendly interface, Grouper enables you to centrally control access to resources, systems, and applications for people enrolled in groups you create using University of Minnesota systems of record or custom lists. Grouper can simplify access management by automating changes to authorization across multiple applications or systems when a person changes their role or is added to or removed from a Grouper group.

Highlights

  • Grouper provides an easy way to provision and deprovision access, which in most cases can be automated by Identity and Access Management.
  • Groups in Grouper are organized in an easy-to-understand folder hierarchy and a user-friendly interface.
  • Allows delegation of control through self-service for any ad-hoc (manually-managed) groups.
  • Enables attestation, auditing, and reporting of changes, including point-in-time membership logs.
  • Grouper allows you to leverage a centralized University of Minnesota access management strategy for institutional roles, access control lists for applications, email distribution lists, etc. 
  • Onboarding support and operational maintenance support for Grouper through the Office of Information Technology IAM (Identity and Access Management) team.

Getting Started

Access Requirements

Active University Employees:

To receive access to Grouper, a requester must be an active University employee. If you are an active University employee, you will be granted access to the Grouper user interface.

View rights in the Grouper web interface depend on your access to individual access levels to folders and groups within Grouper. Grouper users with "VIEW" or higher privileges can see the folders or groups for which they have permissions. 

Other users:

For the non-University employee, submit the Request access to Grouper form and select the maintenance drop down. Your request will be reviewed. When access has been granted, "VIEW" or higher permissions on a folder or group is needed to see objects within the Grouper user interface.