Most organizations have a dedicated set of individuals, which create Tags (Organizational Tenants). The following is an example of the process to create such Tenant.

Create a new Tenant (Tag).
Log into https://demo.spirion.com using your administrative account.
Create a new Tag.
1. The tag type used should be "Simple".
2. Following a naming standard such as an Active Directory OU naming convention (Location-OU).
3. Now create a "Nested Tag" from within the "Simple" tag just created.
  1. On the Tag you created in step 2, Right click, and select Tags, and Create Nested Tag.
  2. Select "Active Directory or LDAP".
    1. Naming Convention (AD OU or IP based on the Type of Tag).
    2. Select the OU the supplied in the request.
Important - Verify that the user requesting the account added is a member in the OU Admins group for the OU they provided.
Click "Add Path" to add the Path.
1. Some organizations can request "IP Range" in addition to the AD OU.
Create a new role by "Cloning" an existing role.
1. On the Admin tab, under Roles, Clone the role "Template" (Right click, clone).
2. Following the OU Admins naming convention (Location-Organization_Admin).
3. Leave the remaining defaults.
4. Assign Tag Permissions.
  1. Highlight the role you created in step 4.
  2. Select the Tag you created in step 2.
  3. Under Tag permissions.
    1. View = Masked.
    2. Export = Masked.
    3. Edit = None.
    4. AddRemovTags, AddRemoveEndpoints can be granted by request.
5. AD Groups
  1. Create new AD Group.
    1. Create the new role by Cloning an existing role.
    2. Set the LDAP to the AD Group
      1. Example: CN=SPIRION_ADMINS_SDM_PRD,OU=SDM,OU=Groups,OU=Security,OU=SPIRION
  2. On the Admin tab, under Roles, Clone the role "Template" (Right click, clone).
  3. Following the OU Admins naming convention (Location-Organization-Admin).
  4. Leave the remaining defaults.
  5. Assign Tag Permissions.
    1. Highlight the role you created in step 4.
    2. Select the Tag you created in step 2.
    3. Under Tag permissions.
      1. View = Masked.
      2. Export = Masked.
      3. Edit = None.
      4. AddRemovTags, AddRemoveEndpoints can be granted by request
Edit should display T, E.
Assign the user to the role.
1. On the Admin tab select Users.
  1. This can at times take a few moments of the AD is very large.
  2. Once the OU=Accounts and CN=Users is displayed apply a filter for that Username field, use the requestor username(s) provided.
    1. Once the filter is complete, highlight the user and assign the Role you created in step 4.

Spirion (Formally Identity Finder) // <![CDATA[ _spBodyOnLoadFunctionNames.push("setupPageDescriptionCallout"); // ]]>

Spirion (Formally Identity Finder)