PennGroups

PennGroups, an offering of ISC's Access Management Services, is a centralized middleware system allowing distributed management of permissions and groups of people/entities for authorization or other reasons (e.g., email lists). It is built on top of Internet2's Grouper product. Submit your support request through ISC's Support Center. Select the PennGroups Request tile.

Using PennGroups, you can electronically manage access to Penn's resources, from web applications to physical resources (such as printers), and more.

• Groups can be quickly created and automatically maintained based on affiliations or other centrally managed data
• Group membership can be automatically updated based on external triggers and events (e.g., when a person leaves Penn or changes roles within Penn)
• Easy creation and maintenance of custom, manual lists of group members
• Multiple services can share the same lists of provisioned group members 
• Centralized deprovisioning: closing an individual’s access to multiple resources in a single location

For more information about PennGroups, see the PennGroups Documentation site.

As of July 2023, the eligible population for an identity to be a member of a group or have a privilege in PennGroups is:

• Has a persistent affiliation (active or inactive) which is something other than ALUM, APPL, GAPL
• -or- Has an ALUM affiliation and also have a PennKey
• -or- Has an active non-persistent affiliation

Note: if you are an ex-employee, you will still be in PennGroups.