In eADM, a user, group, or department is referred to as an object. You can access the main functions for each object type—user, group, or department—directly from the main menu to search for and view details about specific objects.
All object types can be generated from the source data for manual objects.
Searching for Objects
In addition to the general search functionality, object searches support advanced search filters and bulk actions on search results.
Search Filters
To the right of the search field, you will find a dropdown menu for search filters (see Fig. 1). This allows you to refine your search based on the following criteria:
-
Ruleset: Filters the search to objects that are included in a specific ruleset.
-
Import Cycle: Filters the search to objects that were created, modified, or deleted during a selected import cycle. The dropdown list shows the 20 most recent cycles.
-
Permission: Filters the search to users who have a specific permission. This applies only to user searches.
-
Department: Filters the search to users whose primary position is in a specific department. This applies only to user searches. You can also choose to include sub-departments and users who have a secondary position in the selected department.
-
Deactivated [Objects]: Shows only objects that have been deactivated.
The Reset and OK buttons close the dropdown menu. Reset clears all filter options.
Note: The filter icon turns blue when a filter is active. This serves as a helpful visual cue if your search does not return the expected results.
Bulk Actions
When a search returns one or more results, you can perform bulk actions on the selected items.
Below the search results table, a dropdown menu lists the available operations and shows how many objects are included in the selection (see Fig. 2). By default, a bulk action applies to all objects in the current search result. You can create a custom selection by using the checkboxes to the left of each row. When you select at least one object, a mini-section summarizing your selection will appear below the search results.
To remove an object from the selection, uncheck its corresponding checkbox. Click Clear selection to remove all objects.
Warning: If you do not select any specific items using the checkboxes, the bulk action will apply to all results that match your search.
Depending on the object type, your permission level, and your selection, the following bulk actions may be available:
-
Export to CSV file
-
Export anchors to a CSV file
-
Export members to a CSV file (Groups only)
-
Change password (Users only)
-
Restore
Note: CSV exports use UTF-8 character encoding and a semicolon (;) as the delimiter.
Warning: If the exported file contains personal data, you must delete the file from your computer after you have finished using it.
Object Detail View
The detail view for an object contains several tabs, which vary depending on the object type. The main tabs are described below.
Anchor Tab
An anchor is used to identify an object and export its data to third-party systems such as Active Directory, Azure AD, or Compilo. This tab displays all anchors for the object.
-
Anchor: A unique ID that identifies the object in the third-party system.
-
Synchronization Step: The step in the synchronization cycle during which data is exported.
-
Synchronization Template: The template used to generate the export data. This links to the detail view for the specific template.
-
Immutable ID: A Base64-encoded string representing the anchor. This is only used for certain target systems.
-
Deleted: Indicates whether the object to which the anchor refers has been deleted in the third-party system.
Source Data Tab
The Source Data tab is the first tab in the detail view and displays the object's attribute data.
Each row in the table displays the following:
-
Name: The attribute name in eADM the source system.
-
Value: The value from the source system, manually entered data, or a transformed value.
-
Derived Value: Displays the data in a more readable format, such as a formatted date, the name of and a link to a referenced object, a button to view hidden information, or a link to an email address or phone number.
-
Override: Indicates whether an attribute has been overridden and displays its new value.
The final column contains buttons for the following actions:
-
Change value: Creates an override for the attribute.
-
Restore value: Deletes an override.
-
Search: Opens a dialog that displays a list of objects with the same attribute and value.
-
Create ruleset: Opens a ruleset form where the name and rule are pre-filled to match all objects with the corresponding attribute and value.
Groups Tab (User Objects)
This tab displays the user's group memberships. Clicking on a group name opens its details. The " Override " column indicates whether a membership has been manually added or removed.
Hierarchy Tab (Department Objects)
This tab displays the department's position in the organizational hierarchy as a tree structure. The name of the department manager is shown to the right of each department.
-
Click the + or - icons to expand or collapse the view of sub-departments.
-
Click the department name to open its details.
History Tab
The History tab displays a log of all operations performed on the object and its attributes.
-
Registered: The timestamp of the operation.
-
Type: The type of procedure performed (e.g.,
Create,Edit,Delete,AddMember). -
Attribute: The attribute affected by the operation. If left blank, the operation was performed on the object itself.
-
Old Value: The value before the operation.
-
New Value: The value after the operation.
-
Comment: Details about what triggered the operation.
-
Error Message: Displays any errors that occurred during the operation.
-
Sync Step: Shows where in the synchronization cycle the operation was performed.
Members Tab (Group Objects)
This tab lists the members of the group. You can click on a member to open that user's profile.
Permissions Tab (User Objects)
This tab displays the user's permissions, grouped by system or organization.
Note: A user must have permission to mega.eadm.no to perform actions other than viewing their own profile.