Data Enrichment

Data Enrichment allows organizations to consolidate fragmented identity data from multiple sources into unified, complete owner profiles. Through the Enrichment menu, administrators can promote data from discovered accounts to owner records, establish manager hierarchies, and track key performance indicators.

Overview

Enrichment addresses a common challenge: identity data is often scattered across multiple systems and applications, with no single source containing complete information. Enrichment brings this data together by:

• Account Field Promotion - Extracting populated field values from accounts and promoting them to owner records
• Manager Resolution - Establishing hierarchical relationships between owners based on manager data
• KPI Tracking - Calculating and monitoring key performance indicators over time

::: note Administrator Only The Enrichment feature is only accessible to users with the Administrator role. :::

Enrichment Tabs

The Enrichment page is organized into three tabs:

Tab	Purpose
Account Field Promotion	Promote field values from owned accounts to owner records
Enrich with Manager Data	Configure manager hierarchy resolution
KPI Configuration	Define and calculate key performance indicators

---

Account Field Promotion

Account Field Promotion extracts populated field values from accounts owned by each owner and uses them to fill empty fields on the owner record.

How It Works

1. The system identifies all accounts owned by each owner
2. For each empty field on the owner record, it looks for populated values in the owned accounts
3. Values are promoted from accounts to fill the empty owner fields
4. Only empty fields are enriched - existing values are preserved

Handling Multiple Accounts

When an owner has multiple accounts (which is common when the same person has accounts across different applications), you specify a Source of Truth Application. This determines which application's account takes priority when multiple accounts have values for the same field.

Running Account Field Promotion

1. Navigate to Enrichment from the left sidebar.
2. Select the Account Field Promotion tab.
3. Enter a Job Name to identify this enrichment run.
4. Select the Source of Truth Application from the dropdown.
5. Click Start Enrichment Job.

The job runs asynchronously. You can monitor progress in Job History.

When to Use

• After initial data synchronization to populate owner profiles
• When new applications are connected to Hydden.Control
• Periodically to capture updates from source accounts

---

Manager Resolution

Manager Resolution (also called "Enrich with Manager Data") establishes hierarchical relationships between owners by matching account attributes that identify managers.

How It Works

1. You specify a source application containing manager data (e.g., Dayforce, Workday)
2. You configure two field paths:
   • Manager Field Path - The field containing the manager identifier (e.g., entity.ManagerID)
   • Manager ID Field Path - The field uniquely identifying each person (e.g., entity.EmployeeNumber)
3. The system matches accounts where one person's manager field equals another person's ID field
4. Owner-to-owner relationships are created based on these account matches

Configuration Fields

Field	Description	Example
Source Application	Application containing manager data	Dayforce, Workday
Manager Field Path	Field path containing manager identifier	entity.ManagerID
Manager ID Field Path	Field path for unique person identifier	entity.EmployeeNumber
Enable Scheduled Runs	Run automatically daily at 3 AM UTC	Toggle on/off

Configuring Manager Resolution

1. Navigate to Enrichment from the left sidebar.
2. Select the Enrich with Manager Data tab.
3. Select the Source Application containing manager data.
4. Enter the Manager Field Path - the field containing the manager's identifier.
5. Enter the Manager ID Field Path - the field that uniquely identifies each person.
6. Optionally enable Scheduled Runs for daily automatic execution.
7. Click Save Configuration.

Running Manager Resolution

After saving configuration:

• Click Run Now to execute immediately
• If scheduled runs are enabled, the job runs daily at 3 AM UTC

Statistics Display

The Manager Resolution tab displays coverage statistics:

Metric	Description
Total Owners	Total number of owners in the system
Owners with Manager	Count and percentage of owners with resolved managers
Owners Without Manager	Count and percentage without manager relationships

When to Use

• After initial data synchronization
• When HR system data changes significantly
• To establish reporting hierarchies for access review assignments

---

KPI Configuration

KPI Configuration allows you to define and track Key Performance Indicators that measure metrics over time.

Features

• Define KPIs - Create KPI definitions with specific calculation criteria
• Activate/Deactivate - Control which KPIs are actively calculated
• Calculate on Demand - Trigger KPI calculations manually
• View Results - Review calculated KPI values
• AI-Assisted Creation - Use AI to help define KPIs (automatically calculates after creation)

Managing KPIs

1. Navigate to Enrichment from the left sidebar.
2. Select the KPI Configuration tab.
3. View the list of defined KPIs with their active/inactive status.

To create a KPI:

1. Click Create KPI or use AI-Assisted KPI Creation.
2. Define the KPI parameters.
3. Save the definition.

To calculate KPIs:

1. Select the KPI(s) to calculate.
2. Click Calculate to run the calculation.
3. View results when complete.

---

Conflict Management

When enriching from multiple sources, conflicts can occur when different sources provide different values for the same field.

Conflict Resolution Strategies

Strategy	Description
Use First Value Found	Automatically accept the first value encountered
Flag for Human Review	Flag conflicts for manual resolution

Resolving Conflicts

If you choose the "Flag for Human Review" strategy:

1. Conflicts appear in the Enrichment interface.
2. Review the conflicting values and their sources.
3. Select the correct value for each conflict.
4. The system updates the owner record with your selection.

---

Enrichment Job Status

Enrichment jobs progress through these statuses:

Status	Description
Pending	Job created, waiting to start
Running	Job is actively processing
Completed	Job finished successfully
Failed	Job encountered an error
Partial	Job completed with some failures

Job Metrics

Each job tracks:

• Total Owners - Number of owners to process
• Processed Owners - Number processed so far
• Enriched Owners - Successfully enriched count
• Conflicting Owners - Owners with data conflicts
• Failed Owners - Owners that failed to process

Monitor job progress in Job History.

---

Supported External Systems

Manager Resolution supports data from these external systems:

System	Description
Entra	Microsoft Entra ID (Azure AD)
Dayforce	Ceridian Dayforce (HR/payroll)
Workday	Workday (HR platform)
Okta	Okta (identity management)
Custom	Custom/proprietary integrations

---

Best Practices

1. Start with Account Field Promotion - Populate basic owner data first
2. Configure Manager Resolution - Establish hierarchies for reviewer assignment
3. Review Conflicts - Address flagged conflicts promptly for data accuracy
4. Enable Scheduled Runs - Keep manager data current with automatic daily runs
5. Verify Results - Check owner records after enrichment to confirm expected data
6. Choose Source Carefully - Select the most authoritative application as Source of Truth

Related Topics

• Identity Overview - Understanding identity data in Hydden.Control
• Campaigns - Using enriched data in access reviews
• Job History - Monitoring enrichment jobs
• Data Sync - Synchronizing source data