第25章 Automating group membership using IdM CLI

Using automatic group membership allows you to assign users and hosts to groups automatically based on their attributes. For example, you can:

Divide employees' user entries into groups based on the employees' manager, location, or any other attribute.
Divide hosts based on their class, location, or any other attribute.
Add all users or all hosts to a single global group.

25.1. Benefits of automatic group membership
リンクのコピー

Using automatic membership for users allows you to:

Reduce the overhead of manually managing group memberships
You no longer have to assign every user and host to groups manually.
Improve consistency in user and host management
Users and hosts are assigned to groups based on strictly defined and automatically evaluated criteria.
Simplify the management of group-based settings
Various settings are defined for groups and then applied to individual group members, for example sudo rules, automount, or access control. Adding users and hosts to groups automatically makes managing these settings easier.