Skip to main content

Automatically assign groups based on designation
App

You can automatically add users to Atlan groups based on their job designation at first login. This reduces manual onboarding effort and keeps group memberships aligned with how users work in your organization.

Prerequisites​

Before you begin, make sure you have:

  • Access to the Designation-based group provisioning app. If you don't have access, contact Atlan support or your Atlan customer team to request it.
  • Admin permissions in Atlan to configure workflows and manage groups. Learn more about user roles.
  • The main target groups created in Atlan, as described in Create groups, or a clear plan for which groups the app can create automatically.

Set up workflow​

  1. In your Atlan workspace, go to the homepage and click New workflow in the top navigation bar.

  2. Search for Designation-based group provisioning, and then click Set up workflow.

  3. In Workflow Name, enter a descriptive name that clearly identifies the purpose of this workflow. For example, prod-designation-group-provisioning.

Configure mapping and options​

  1. In the Upload local mapping file, upload the designation-to-group mapping CSV file. The file maps each user’s designation in Atlan (DESIGNATION) to the Atlan group they join (GROUP_NAME) at first login.

    For example, the following mapping provisions users with the Data Engineer designation into the Data Engineering group:

    DESIGNATION,GROUP_NAME
    Data Engineer,Data Engineering
    Other,Business Users

    For details on the required CSV structure and a full example, see Upload local mapping file.

  2. Under Handling for missing groups, select Create to automatically create any GROUP_NAME values from the mapping file that don't already exist in Atlan. The workflow then provisions users into those groups.

    If you want to prevent new groups from being created automatically (for example, when groups must be created and approved separately), select Skip.

  3. In the Remove mapped users from DEFAULT groups, select Yes to remove users from configured DEFAULT groups after they're successfully provisioned into one or more mapped (non-default) groups. This helps keep users from retaining broad default access once they've been assigned to a more specific group.

  4. Schedule and run the workflow. Run the workflow manually, or set a recurring schedule to keep group assignments aligned with designation changes over time.

Need help?​

If you have any issues related to configuring the app, contact Atlan support.

See also​