Access Control: User Groups Tab

You can manage the user groups associated with the users and objects in your environment. You can import user groups from an LDAP database that resides on another machine, or from a single sign-on server.

Where You Manage User Groups

1. To manage user groups, from the left menu, click Administration, and then click the Access Control tile.
2. Click the User Groups tab.

Table 1. Access Control User Groups Summary Grid

Option	Description
User Groups toolbar	To manage user groups, use the toolbar icons. Click the Add icon to add a user group, and provide the details for the user group in the Add User Group dialog box. Click the Vertical Ellipses to perform any one of the following actions: Edit. Edit the selected user group, and modify the details for the user group in the Edit User Group dialog box. Clone. Clone a user group, and enter a name and description for the cloned user group. Delete. Delete a user group. Click the Horizontal Ellipses and click Import to import a user group, and provide the details to import the user group in the Import User Groups dialog box.
Group Name	Name of the user group.
Description	Description of the group, indicating its purpose.
Members	Number of members in the group.
Group Type	Type of group, either a local user group or a group imported from LDAP.
Distinguished Name	Names for LDAP objects, such as domains and users.
Access All Objects	Indicates if the user group account is allowed to access all the objects that are imported into the vRealize Operations instance.
Modified By	Indicates the last person to update the user group.
Last Modified	Indicates the last time the role was updated.

After you select a user group in the summary grid, view details about associated users in the Details pane.

Table 2. Access Control User Groups Details Grid

Option	Description
User Accounts	Associated user accounts appear when you click a user group in the summary grid. You can then view or modify user accounts that are part of the selected group. User Name: Name of each user who is a member of the selected group. To change the user accounts associated with the user group, click the Add icon. The Add Users to Group dialog box opens. Click the All tab to view all the available user accounts. Click the Selected tab to view the user accounts that are part of the group. Click the Unselected tab to view the user accounts that are not a part of the group. Use the Search field to search for specific user accounts. First Name: First name of each user account in the group. Last Name: Last name of each user account in the group. You can remove a user from the group by selecting the user in the Details pane and clicking Delete
Permissions	View the permissions of the role associated with the user group. To add or remove roles, view only the selected or deselected roles, or search for a specific role, click the Edit icon. Role Name: Indicates the roles assigned to the selected user group. Role Description: Description for the selected user group, defined when you created the group. Object Hierarchy: The names of the object hierarchies assigned to the group while holding a specific role. Objects: The number of objects the user group can access within the selected hierarchy.