Global Users
A global user ID is assigned to each person who uses business applications subject to models and controls. An individual's global user ID correlates to potentially varying IDs that person may have for business-application accounts.
The global user ID ensures that each person is recognized properly by access models and controls, and by transaction models and controls that incorporate the User business object. In particular, the global-user ID serves as a single identifier for each user who has accounts in multiple data sources. For another example, the global user ID would serve as a single identifier for an individual who marries, then changes her surname.
You determine how to formulate global users. To do so, you select one or more attributes that can identify users uniquely. For example, the default attribute is Email. In an environment in which each user has a single, distinct email address, you might use only that attribute.
You then run a synchronization job, which identifies the following for each person:
-
Global user: The last record with identifying-attribute values that apply to a given person. The user name for this record serves as that person's global user name. The global user name, first name, and last name values for this record may be displayed in model results and incidents concerning the user.
-
Related users: All other records with the same identifying-attribute values as those that generated a global user. Risk Management assigns related users the same global user name as that of the global user to which they're related.