Groups
The following tables list the tasks that users can perform on groups.
Groups can be assigned to a specific department and they can have a public or private visibility.
Granting a group private visibility means that public users from all departments and the private users from its own department can be added to it, but this group ID will not be seen by the administrators from other departments. This group can be set as the authorized group ID in a file transfer definition that is assigned to this department. This group can also be used as the group ID value in a user profile definition for public and private nodes in this specific department.
Granting a group public visibility means that this group can do what a private group can do plus this group ID will be seen and available to department administrators in the system. This group can have public users from other departments added to it, and the group can be set as the authorized droup ID in a file transfer definition that is assigned to other departments. The group can be used as the group ID in a user profile definition created for public nodes assigned to other departments. Group IDs must be unique throughout the system, thus groups in different departments cannot have the same group ID. A group can only belong to one department in the system.
A department administrator can see groups assigned to his department as well as groups from other departments that have a visibility of public. If super administrator updates a group originally created by department administrators, then only the information that department administrators have access to can be used. Otherwise, an error will occur.
UpdateGroupRight enables a user to add, update, delete and view groups. ViewGroupRight enables a user to view groups.
| User | Task |
|---|---|
| Department Administrator | Creates a group, which is assigned to this administrator’s department or the department that the administrator can manage. The group’s visibility can be set to public or private. |
| Super Administrator | Creates a group whose department can be set to any department in the system or to none at all.
The group’s visibility can be set to public or private. A group that is not assigned to a department gains no special properties but can only be administered by a Super Administrator. |
| User | Task |
|---|---|
| Department Administrator | Updates and deletes any groups that have been in the administrator’s department and the departments that the administrator can manage.
Department administrators can see and change the Department parameter of a group definition assigned to their departments and the Department parameter of a group definition assigned to any departments that they can manage. The visibility of the group can be changed to public or private by department administrators. |
| Super Administrator | Lists, updates and deletes any group in the system.
The department that this group has been assigned to can be changed to any department in the system or to none at all. The visibility of the group can be changed to public or private. Care should be taken when changing the visibility of a group since it may include or exclude users when this change is made. |