Feedback Ideas

There would be some potential benefit in having an Admin Dashboard when you login to the NIM Studio. Essentially providing an overall health status for the service. Here are some key items you would see System/Filters/Jobs/Scheduler StatusesLicense StatusBackup StatusConnector/Service UpdatesConfiguration RecommendationsRecent Error logs Attached is a concept of the information that could be presented

Provide the option to attach files to mail templates. Perhaps we can provide the ability to specify an attachment(s) by specifying a path, filter or audit query.

Currently if we want to make apps, like the Onboarding Portal for example, accessible on the internet we have to make our entire NIM server, with all of it's PII and sensitive data, accessible on the internet. Their needs to be an option to run the Apps on a separate server that can be placed in the DMZ and leave the server with the data behind the firewall.

Change the Role Model Threshold for Active Directory connector to be based on number of memberships changes instead of number of groups changing.

It would be nice to be able to structure & reorder roles either through folders, or child roles akin to filters.

Should have the ability to write to a Google sheet like it does with creating a csv export

In Privileged Identity Management, elevated rights are typically granted on a temporary basis (e.g., 8 hours). NIM should have native functionality to support this directly. While some target systems offer time-bound permissions, a centralized approach within NIM would provide greater control and consistency. This perhaps is related to https://feedback.nimsuite.com/b/5v84550g/feature-ideas/workflows

Presently, the Membership tab of a role displays the Group ID, Group Display Name, and Member ID. Without a Member Display Name, this view is useless except for validating that the role has more than zero members. It would be infinitely more useful if we could see the name of the members in this view as well.

Provide the ability to define characters that should not be include in the random password generator

I would love a way to do a global search across all relations, filters, mappings, jobs, templates, actions, etc. So when either developing a new process that may be similar to a current one you can "check all your boxes" (so to speak) or troubleshooting different automated tasks you can easily pull up anything related to a title (if you're already naming in a way so they all relate). Or even if it could search inside filters to pull the names of different data points that are being used to create that filter. If it helps to relate, the Global Find in Palo Alto firewalls dashboards is top notch!

Right now when a system's data is pulled you can see the record count for all of the tables of the system combined together in the collection history's 'count' column. When there is a guard in place for that system and that guard is triggered you can only see that the collection status is 'error-guard' and the count is different. I am requesting to be able to select at least two data pulls in the collection history list and be provided with a report that shows the differences between them divided by each table within the system. A quick way to see that, for example, "these are the 400 groups that are no longer in the data".

NIM currently supports only two access levels: FULL or APPS-only. It would be helpful to have an "admin light" security level for junior admins to manage existing source syncs and run existing schedules/jobs when needed, but not be able to make changes to role model, mappings, filters, or what-have-you.

Allow a temporary increase to thresholds in jobs. I have seen several customer NIM environments recently where they had adjusted the job thresholds to allow for the spike in enrollment changes at the beginning of the school year. It was set to really high number and they had forgotten to set it back to a modest number. In one instance, the customer had ALL of their employee's Google groups removed.

To protect NIM configuration natively, we should provide the ability to schedule automatically backups. This is beneficial when there are multiple NIM Administrators making configuration changes and often forget to back up their configuration.

A proposed enhancement to the product is the introduction of workflows, allowing requests to be reviewed and approved by designated reviewers before proceeding. This would be particularly beneficial in scenarios such as application access requests or provisioning processes, ensuring oversight and compliance. How Workflows Would Improve the Product Approval Mechanism – When a user submits a request (e.g., access to an application or a provisioning action), it enters a workflow where assigned reviewers must approve or reject it before execution. Role-Based Reviewers – Approval requests could be routed to specific individuals based on their roles (e.g., managers, security officers, or compliance teams). Multi-Step Approvals – Workflows could support multi-tiered approvals where different stakeholders must review a request at various stages. Audit and Compliance – Each approval or rejection would be logged, providing a clear audit trail for governance and regulatory requirements. Example Use Case A user requests access to an HR application. Instead of immediate access, the request follows this workflow: Step 1: The user's manager reviews and approves the request.Step 2: If approved, the HR department reviews and grants final approval.Step 3: Upon approval, the provisioning process assigns the necessary permissions automatically. By incorporating workflows, the product enhances security, ensures compliance, and streamlines access management while preventing unauthorized changes.