The user would be global though and not change just because you move between companies/sites?

Correct - But they move between different sites and different roles. I guess you can´t be a member of more than one HR/Positions, now I thinking of Procurement/Authorization/Purchase Auth.

I think the user creation part is easy, but to do the other layers that´s what I need input on.

/Karl

Hi, 

Have you looked into implementing Role Mappings while synchronizing AD? 

You will have to configure AD user groups and the corresponding IFS user groups so that the role mappings can be set. Once configured, to change a role mapping, you could add the user to the corresponding group in AD and the sync job should take care of the role mapping in the application side. 

Please refer the following extract from F1 doc attached. Hope this helps!

The relevant page is: https://docs.ifs.com/techdocs/Foundation1/040_administration/210_security/010_users/100_active_directory_sync/hidden_itd/032_role_mappings.htm

*Admin Update: Replaced wit link with docs link (April 2020)

You can bulk-shift HR organization and positions from Human Resources\Employee Management\Employment\Organization and Position Assignments. 

The question is a little bit too vague to give you a good answer.