Overview
Calculated Authorization Groups use a rule engine to determine membership automatically. Rules are evaluated by the nightly cron scheduler and can be triggered on demand via force acquisition. This topic covers building rules, understanding logic operators, testing rule sets, and forcing immediate recalculation.
Rule types
The rule builder offers system-defined rule types (such as department, structure, and contract type) and a manual rule option for custom SQL conditions. Manual rules are restricted to system administrators and are automatically scoped to the current brand.
Logic operators
| Operator | Effect |
|---|---|
| OR | Union — this rule set adds members to the group population. |
| AND | Intersection — this rule set restricts the population to users who also match this set. |
Adding a rule
In the group detail view, open the Rules tab and click Add membership rule. Select a rule type, configure its parameters, set the logic operator, and optionally add a human-readable description. Click Create rule to save.
Testing rule logic
Click Test logic to evaluate all active rule sets against the current user database without saving any changes. The result appears in a preview banner showing how many users would be acquired.
Force acquisition
Click Force acquisition to apply all rules immediately without waiting for the nightly cron. The system runs the full rule evaluation, updates the member list, and shows a confirmation banner with the number of memberships acquired.
Reordering and deleting rules
Rules within a set can be reordered by drag-and-drop. To delete a rule, click its delete icon and confirm. Default groups are protected — their rules cannot be edited or deleted.
Lapsed conditions
If a rule references data that no longer exists (for example, a deleted structure), the affected member row displays a lapsed-condition icon. Review and update the rule to resolve this warning.
