See User Group Associations/Provisioning Licenses?

Hey ​@nmills2121 do you use Salesforce authentication at all? If you do, and you have the right permissions, you should be able to query the Use Package License and Permission Set Assignment objects in Salesforce.

This would allow you to potentially do something like this:

1. New User/Update User Request
2. Create SFDC user (if needed)
3. Assign NXT permission and license in SFDC
4. Query tables in #3 to find approved users via rule
5. Use API external action to Assign License

You would need some user metadata like title/role potentially to determine which license type they need. 

Permission bundles have their own assignment logic you can use, as do data sharing groups.

​@bradley Thank you so much for responding!

Currently we bring our users in from SF with a nightly sync - our issue is we don’t currently have any reliable metadata that comes from SF to pinpoint different roles. We are trying to find a reliable way for Managers to be able to identify their teams in GS, in which I determined User Groups would be a good fit if we could see User to User Group associations in the rules engine. 

Another less reliable option I am considering that might work is that if a user is associated with a Company in a specific lookup field and their license type is Internal_Collaborator, then using a real time rule to call the API to adjust their license and permission bundle. Only users who we would want to be full users would be associated with our Companies in GS, so this might be adequate - but there are other custom fields we would like to populate based on User Groups so if we could do that, it would be more ideal.

Gotcha - to be honest this will likely not be a Gainsight only solution.

If you don’t have role based data in Salesforce, do you at least have the reporting hierarchy? E.g., do you know who everyones manager is? If so, you should be able to mirror that in Gainsight and infer some groups based on that.

Alternately, if you use a system like Workday for employee data, they might store the type of role information you’re looking for. If you can get access to that, you could then use that to enrich your user data.

​@bradley That makes sense - I think our SF data would not be reliable for that information without changing the workflow of other teams. I’ll keep chewing on this. I do think it would be intuitive if there was a way to see User to User Group associations - but I do recognize this data should exist in our sources. 

You could also create your own attributes on User that more or less function as user group associations. I do agree though that having attributes about your users you’re unable to query in said system, doesn’t make sense.