Overview
Calculated Authorization Groups use a rule engine to determine membership automatically. Rules are evaluated every night by the cron scheduler and can also be triggered on demand. Each rule belongs to a rule set, and each set has a logic operator that determines how it combines with the others.
Logic operators
| Operator | Effect |
|---|---|
| OR | Union — this rule set adds members to the group population. |
| AND | Intersection — this rule set restricts the population to users who also match this set. |
Adding a rule
- Open the group detail view and navigate to the Rules tab.
- Click Add membership rule.
- Select a rule type from the available system-defined options (e.g. department, structure, contract type). System administrators can additionally create a manual rule using a custom SQL condition scoped to the current brand.
- Set the logic operator (OR or AND) for this rule set.
- Optionally enter a human-readable description of what the rule does.
- Click Create rule.
Testing rule logic before saving
Click Test logic to evaluate all active rule sets against the current user database without committing any changes. The result banner shows how many users would be acquired.
Applying rules immediately (force acquisition)
Click Force acquisition to apply all rules immediately without waiting for the nightly cron. The system updates the member list and shows a confirmation with the number of memberships acquired.
Reordering and deleting rules
Rules within a set can be reordered by drag-and-drop. To delete a rule, click its delete icon and confirm the prompt. Default groups are protected — their rules cannot be modified or deleted.
