HP Identity Driven Manager Software Series - Manual (Page 23)

Getting Started
Before You Begin
Understanding the IDM Model
The first thing to understand, is that IDM works within the general concept of
‘domains’ or ‘realms’. Basically, realms are very large organizational units;
every user belongs to one, and only one, realm. While it is possible to have
multiple realms, most organizations have only one, for example, hp.com or
csuchico.edu.
In the IDM GUI, the top level of the navigation tree is the Realm, with all other
information for APGs, RADIUS Servers, and Users arranged beneath. Users
are linked to the Realm to which they belong, and the Access Policy Group to
which they are assigned.
The fundamental configuration model of IDM involves Users and Groups.
Every User belongs to a Group – in IDM these are called Access Policy Groups
(APGs). Each APG has an Access Policy defined for it, which governs the
access rights that are applied to its Users as they enter the network.
2-5