Manage Groups, Permissions, and Global Roles

Manage groups

You can perform the following on the Manage Groups tab:

• View groups
• Create new group
• Edit groups
• Add users to a group
• Remove users from a group
• Use AD Groups to manage permissions and roles

View groups

To view existing groups:

1. Click the Apps menu. Go to the app for which you would like to view groups and click the icon in the Actions column.
2. Click Configurations.
3. Click on the Manage Groups tab to see the following:
   • Group Name
   • Description
   • Users (includes the number of users in the group)

Create a new group

To create a new group:

1. Click the Apps menu. Go to the app for which you would like to create a new group and click the icon in the Actions column.
2. Click Configurations. Then click the Manage Groups tab.
3. Click Add. Enter the group name and description and click Save. You will be notified that the group was added and the new group will be listed on the Manage Groups tab for that app.

Edit a group

You can change ("edit") the group name and description. To edit a group:

1. Click the Apps menu. Go to the app for which you would like to edit the group and click the icon in the Actions column.
2. Click Configurations, and click the Manage Groups tab.
3. Select a group and click Edit.
4. Change the group name or description and click Save.
5. Changes update immediately and can be viewed on the Manage Groups tab. If the updates do not show, refresh the page.

Add users to a group

To add users to a group:

1. Click the Apps menu. Go to the app for which you would like to add users to a group and click the icon in the Actions column.
2. Click Configurations and then click the Manage Groups tab.
3. Click on the number in the Users column which corresponds to the group.
4. The Assign Users window will appear.
5. To add a user, select a name from the User field and click Add. The name will appear in Assigned Users window. Changes update immediately and can be viewed on the Manage Groups tab. If updates do not show, refresh the page.
   Further Information:

   • Users receive an email notification when they have been added to a group.

   • Groups and group permissions are specific to each app. For example, users in a Solution Reviewer group in App 1 will not automatically be in a Solution Reviewer group in App 2; they must be added to these two groups independently.

   • When a user is added to a group, all permissions associated with that group are automatically assigned to that user.

Remove users from a group

To remove users from a group:

1. Click the Apps menu. Go to the app for which you would like to remove users from a group and click the icon in the Actions column.
2. Click Configurations and click the Manage Groups tab.
3. Click the number in the Users column which corresponds to the group.
4. The Assign Users window will appear.
5. To remove a user, hover over the user’s name under the Assigned User window and click the delete icon. When prompted to confirm the deletion, click Yes. (To search for users in the group, you can opt to use the Search Users box.) Changes update immediately and can be viewed on the Manage Groups tab. If updates do not show, refresh the page.
   furtherinformation: Further Information:

   • Users receive an email notification when they have been added to a group.

   • Groups and users within a group are specific to each app. For example, users deleted from a Solution Reviewer group in App 1 must be separately deleted from a Solution Reviewer group in App 2.

   • When users are removed from a group, they no longer have the permissions associated with that group.

Predefined user groups for apps

As an App Administrator, you can see the predefined user groups below.

Manage permissions and roles with AD Groups

AD Groups: App Roles Sync

An Admin can manage all App Group's assignments to users with an AD Group. Users will have these App Groups assigned automatically if their AD Groups are added to these App Groups.

Add AD Groups for App Roles Sync

To add an AD Group for App Roles sync:

1. Go to the Configuration page of the App for which you want to add an AD Group.
2. On the Manage Groups tab, select the app group for which you want to add the AD Group by clicking the number in the AD Group column.
3. In the panel that opens, provide the AD Group name and domain. You can also use the Lookup AD Group option to search for AD Groups.
4. Once the group is located and added, click Add. You will receive a confirmation message that the group has been added successfully.

Remove AD Groups for App Roles Sync

To remove an AD Group for App Roles sync:

1. Go to the Configuration page of the App for which you want to remove the AD Group.
2. On the Manage Groups tab, select the app group for which you want to remove the AD Group by clicking the number in the AD Group column.
3. In the panel that opens, click the Delete icon next to the AD Group that you want to remove.
4. Once the group is deleted, you will receive a notification that the group has been removed successfully.

Manage Portals

Portal page has User management feature added on Portal Administration link. Clicking on Groups section opens up panel to add AD Group.

Administrators can manage all Portal Group assignments to users with AD Groups. Users will get these Portal Groups assigned automatically if their AD Groups are added to these Portal Groups. Below are the specific details:

Manage Portal Users with User Sync Feature

Portal administrator can manage Portal Group assignment to users with AD Groups. Users will get these Portal Groups assigned automatically if their AD Groups are added to Portal Group.

Assignment of Portal

This operation will add all the users of the AD Group to this Portal’s Group.

Revocation of Portal

This operation will remove access to all the users of the AD Group from current Portal.

Global roles

Add or remove users

You can add or remove administrators or visitors.

To add users to administration-related or visitor global roles:

1. Click the Settings menu and then click Administrators.
2. Click Edit. Select a name from the user drop-down list in the Administration group.
3. Click Save. You will be notified that the changes have been saved successfully. If the updates do not show, refresh the page.

To remove users from administration-related or visitor global roles:

1. Click the Settings menu and then click Administrators.
2. Click Edit. Click the ‘X’ next to each user you need to delete from the Administration group.
3. Click Save. You will be notified that the changes have been saved successfully. If the updates do not show, refresh the page.