Create a new user group. You can name the group, enter the email distribution addresses for the group, assign roles to the group, and identify which vaults the group can access.
Note: You must be assigned the role of Administrator to perform this operation.
- Select Tools
Administration
Global Settings.
- In the Global Settings dialog box, select the Security tab.
- Click Manage Access.
- In the User and Group Management dialog box, select the Groups tab and click New.
- In the New Group Profile dialog box, enter the information for the new group:
- Name for the group
- Email distribution list address for the group. You can also enter a list of individual email addresses separated by a semicolon (;).
- Enter the required information under the Profile attributes.
- Click Linked to for associating the group to an Active Directory group. Refer to Link to an Active Directory Group for more information.
- Click Roles and assign one or more roles to the group. Every member of the group is assigned the permissions of the group. Individual user roles are combined with the roles assigned to the group to which a user belongs. As a best practice, always assign roles to groups to make user permission management easier.
- Click Vaults and select one or more vaults to which the group has access. Every member of the group has access to the vaults assigned to the group.
- A group can be a member of another group. Click Groups and select one or more groups to which this group belongs.
- Select the Enable group checkbox to activate the group.
Note: A group must be enabled for the permissions of the group to be active. When a group is disabled, the roles and vault access assigned to the group are no longer available to the members of that group.
- Click Add to add members to the group.
- From the Add Members dialog box, select the users to include in the group, and then click OK.
- Click OK.
You can add custom attributes to define additional group settings. Refer to Profile Attributes for more information.