Chapter 23. Managing user groups in IdM Web UI
This chapter introduces user groups management using the IdM web UI.
A user group is a set of users with common privileges, password policies, and other characteristics.
A user group in Identity Management (IdM) can include:
- IdM users
- other IdM user groups
- external users, which are users that exist outside of IdM
For details about the group types in IdM, see The different group types in IdM section. For details about direct and indirect group members, see Direct and indirect group members section.
23.1. Adding a user group using IdM Web UI Copy linkLink copied to clipboard!
Follow this procedure to add a user group using the IdM Web UI.
Prerequisites
- You are logged in to the IdM Web UI.
Procedure
-
Click Identity
Groups, and select User Groups in the left sidebar. - Click Add to start adding the group.
Fill out the information about the group. For more information about user group types, see The different group types in IdM.
You can specify a custom GID for the group. If you do this, be careful to avoid ID conflicts. If you do not specify a custom GID, IdM automatically assigns a GID from the available ID range.
- Click Add to confirm.
23.2. Deleting a user group using IdM Web UI Copy linkLink copied to clipboard!
Follow this procedure to delete a user group using the IdM Web UI. Note that deleting a group does not delete the group members from IdM.
Prerequisites
- You are logged in to the IdM Web UI.
Procedure
-
Click Identity
Groups and select User Groups. - Select the group to delete.
- Click Delete.
- Click Delete to confirm.
23.3. Adding a member to a user group using IdM Web UI Copy linkLink copied to clipboard!
You can add both users and user groups as members of a user group. For more information, see The different group types in IdM and Direct and indirect group members.
Prerequisites
- You are logged in to the IdM Web UI.
Procedure
-
Click Identity
Groups and select User Groups in the left sidebar. - Click the name of the group.
- Select the type of group member you want to add: Users, User Groups, or External.
- Click Add.
- Select the checkbox next to one or more members you want to add.
- Click the right arrow to move the selected members to the group.
- Click Add to confirm.
23.4. Adding users or groups as member managers to an IdM user group using the Web UI Copy linkLink copied to clipboard!
Follow this procedure to add users or groups as member managers to an IdM user group using the Web UI. Member managers can add users or groups to IdM user groups but cannot change the attributes of a group.
Prerequisites
- You are logged in to the IdM Web UI.
- You must have the name of the user or group you are adding as member managers and the name of the group you want them to manage.
Procedure
-
Click Identity
Groups and select User Groups in the left sidebar. - Click the name of the group.
- Select the type of group member manager you want to add: Users or User Groups.
- Click Add.
- Select the checkbox next to one or more members you want to add.
- Click the right arrow to move the selected members to the group.
Click Add to confirm.
NoteAfter you add a member manager to a user group, the update may take some time to spread to all clients in your Identity Management environment.
Verification
Verify the newly added user or user group has been added to the member manager list of users or user groups:
23.5. Viewing group members using IdM Web UI Copy linkLink copied to clipboard!
Follow this procedure to view members of a group using the IdM Web UI. You can view both direct and indirect group members. For more information, see Direct and indirect group members.
Prerequisites
- You are logged in to the IdM Web UI.
Procedure
-
Select Identity
Groups. - Select User Groups in the left sidebar.
- Click the name of the group you want to view.
- Switch between Direct Membership and Indirect Membership.
23.6. Removing a member from a user group using IdM Web UI Copy linkLink copied to clipboard!
Follow this procedure to remove a member from a user group using the IdM Web UI.
Prerequisites
- You are logged in to the IdM Web UI.
Procedure
-
Click Identity
Groups and select User Groups in the left sidebar. - Click the name of the group.
- Select the type of group member you want to remove: Users, User Groups, or External.
- Select the checkbox next to the member you want to remove.
- Click Delete.
- Click Delete to confirm.
23.7. Removing users or groups as member managers from an IdM user group using the Web UI Copy linkLink copied to clipboard!
Follow this procedure to remove users or groups as member managers from an IdM user group using the Web UI. Member managers can remove users or groups from IdM user groups but cannot change the attributes of a group.
Prerequisites
- You are logged in to the IdM Web UI.
- You must have the name of the existing member manager user or group you are removing and the name of the group they are managing.
Procedure
-
Click Identity
Groups and select User Groups in the left sidebar. - Click the name of the group.
- Select the type of member manager you want to remove: Users or User Groups.
- Select the checkbox next to the member manager you want to remove.
- Click Delete.
Click Delete to confirm.
NoteAfter you remove a member manager from a user group, the update may take some time to spread to all clients in your Identity Management environment.
Verification
Verify the user or user group has been removed from the member manager list of users or user groups: