Back to Organization
Organization

Organization Center

32 views

title: Organization Center category: Organization tags: organization, department, manager, hierarchy, structure priority: Normal

Organization Center

The Organization Center provides a comprehensive view of your organization's structure as derived from your synced directory data. It enables administrators to explore departments, manager hierarchies, and divisions, and to use organizational context for governance decisions.

Accessing the Organization Center

Navigate to Administration > Organization Center or go directly to /admin/organization. The page presents three distinct views of your organizational structure, each offering a different lens into how your workforce is organized.

Three Organizational Views

By Department

The Department view displays a hierarchical tree of all departments discovered from synced Active Directory attributes.

Feature Description
Department Tree Nested hierarchy showing parent and child departments
Headcount Number of identities assigned to each department
Drill-Down Click any department to see its members and sub-departments
Search Filter the tree by department name

The department hierarchy is built from the department attribute on synced user objects. If your AD environment uses a flat department structure (no parent-child relationships), the tree displays a single level with all departments listed alphabetically.

By Manager

The Manager view presents the organization as a management hierarchy, showing each manager and their direct reports.

Feature Description
Manager Tree Hierarchical view rooted at top-level managers (those without a manager)
Direct Reports Count Number of immediate direct reports per manager
Total Reports Recursive count including all nested reports
Drill-Down Expand any manager to see their team
Unmanaged Section showing identities with no assigned manager

This view relies on the manager attribute in Active Directory. IdentityCenter resolves the Distinguished Name stored in this attribute to build the tree. See Manager Resolution & Org Chart for details on how this resolution works.

By Division

The Division view groups identities by the division attribute, providing a high-level organizational segmentation.

Feature Description
Division List All divisions with member counts
Drill-Down Click a division to see all members
Departments Within View which departments fall under each division
Unassigned Identities without a division attribute

Divisions typically represent major business units (e.g., "North America Operations," "Engineering," "Corporate Services") and provide a broader grouping than departments.

How Organizational Data is Built

The Organization Center derives its data entirely from attributes synced from your connected directory sources during the synchronization process.

AD Attribute IdentityCenter Field Used In
department Department Department view, policy scoping
manager ManagerObjectId (resolved) Manager view, org chart, workflow routing
division Division Division view, reporting
title Title Display context, role-based policies
company Company Additional grouping context
physicalDeliveryOfficeName Office Location-based reporting

Important: Organizational data is only as current as your last synchronization. If directory attributes change, the Organization Center updates after the next sync run. Configure regular sync schedules to keep this data fresh.

Statistics and Headcounts

Each organizational unit displays statistical summaries:

Statistic Description
Total Members Number of identities in the unit
Active Members Members with enabled accounts
Inactive Members Members with disabled or expired accounts
With Manager Members that have a resolved manager relationship
Without Manager Members missing the manager attribute

These statistics help identify data quality issues. A high "Without Manager" count, for example, indicates gaps in your directory data that should be addressed for effective governance.

Drilling Into Organizational Units

Clicking on any department, manager, or division opens a detail view showing:

  • Member List - All identities in the unit with key attributes (name, title, status, last login)
  • Sub-Units - Child departments or direct reports, depending on the view
  • Group Memberships - Common groups held by members of the unit
  • Compliance Status - Policy violations affecting members of the unit

The detail view supports sorting, filtering, and exporting the member list for further analysis.

Using Organizational Data for Governance

Organizational structure plays a central role in several IdentityCenter governance features:

Access Reviews

When creating access review campaigns, you can scope reviews by organizational unit:

Scoping Option Description
By Department Review access for all members of a department
By Manager Route reviews to each manager for their direct reports
By Division Review access across an entire division

Manager-based routing is the most common pattern. Each manager receives a review task for their direct reports, ensuring that the person most familiar with each employee's role makes the access decision.

Workflow Routing

Workflows can route approval requests based on organizational relationships:

  • Manager Approval - Route to the requester's manager
  • Department Head - Route to the top-level manager in the department
  • Skip-Level - Route to the manager's manager for escalation

Policy Scoping

Policies can be scoped to specific organizational units:

  • Apply a "Privileged Access" policy only to the IT department
  • Enforce stricter password policies for the Finance division
  • Exempt service accounts in the Infrastructure department from login tracking

Integration with Manager Resolution

The Organization Center's manager hierarchy depends on the manager resolution process that runs during synchronization. The sync engine:

  1. Reads the manager attribute (a Distinguished Name) from each AD object
  2. Resolves the DN to the corresponding internal ObjectId
  3. Stores the resolved ManagerObjectId on the object record

This resolution is performed by the Lookup step in the sync pipeline. If a manager's DN cannot be resolved (because the manager account has not been synced, for example), the relationship is left unresolved and the identity appears in the "Unmanaged" section.

For a detailed explanation of this process and troubleshooting guidance, see Manager Resolution & Org Chart.

Data Quality Considerations

The accuracy of the Organization Center depends on the quality of your directory data. Common issues include:

Issue Impact Resolution
Missing department attribute Identity not shown in Department view Update the attribute in AD
Missing manager attribute Identity appears as unmanaged Assign a manager in AD
Stale manager reference Points to a deleted or disabled account Update the manager DN in AD
Inconsistent department names Fragments the department tree (e.g., "IT" vs "Information Technology") Standardize naming in AD
Circular manager references Resolution fails for the affected chain Break the circular reference in AD

Tip: Use the Organization Center's statistics to identify data quality issues early. A dashboard showing a high percentage of unmanaged identities or unassigned departments is a signal that directory hygiene needs attention.

Next Steps

Tags: organization department manager hierarchy structure

Was this article helpful?

Related Articles

Manager Resolution & Org Chart