Groups Tab in User Management

Purpose

In this tab, you manage the groups and their rules for logging-in to models or logging-in to model servers as a repository administrator.

You use user groups for the general assignment of rules. In the Users tab, you can define user-specific rules if necessary.

Groups (and therefore all members) can be given the right to manage users on the license server.

Prerequisites

In order to call the central user management on the main license server in the administration program and use its functions, you must be logged-in to the license server as an administrator or your user must have the Manage Users right (normally as a group member).

Call

In the user management, select the Groups tab from the tab tree.

Structure

This tab consists of two areas: On the left is the table of groups and on the right are the rules and group/member assignments of the selected group.

The name of the selected group is displayed in the status bar.

A filter field is available in the Groups table.

Groups Table

Displays the properties of the groups and enables the filtering of the table.

Table Columns

External

Displays whether the entry was locally created and can be modified or comes from an external user management and cannot be changed.
Name

For LDAP groups, the group name is the name on the LDAP server.
Domain

Required on Windows to determine the group from the system login.
Manage Users

The column shows whether all group members can manage users in the license server.

This right also includes the right to assign this right.
Login Rules

Indicates whether the group has any login rules for its users.
Model Administrator Rules

Indicates whether the group has any model administrator rules for its members.
Model Server Rules

Indicates whether the group has any model server rules for its users.
Version Rules

Indicates whether the group has any version rules for its users.
Superordinate Groups

Indicates whether the group has any superordinate groups.
Members

Indicates whether the group has any members.

Details of Selected Group

Rule Tables

The tables display the rules of the selected group.

The direct group rules are always listed before the inherited group rules and their order can be changed.

Inherited rules cannot be moved. You cannot change the order of the inherited rules.

When you log-in, the first applicable rule is used as long as no applicable direct user rule is found.

Table Columns

Access

Access sets whether the rule allows or denies access to the given models.
Role (only for login rules)

A role's name or pattern can be selected from the list of roles or directly entered. The list of roles comes from the entries in Roles tab.
Project

A project license server's name or pattern can be selected from the list or entered directly. It is identified using Name.Port. The list of project license servers comes from project license servers which are currently running and available.
Repository (only for standalone models)

A repository's name or pattern can be selected from the list of repositories or entered directly. The list of repositories comes from model servers which are currently running and available on the project license servers set in the Project column.
Model (only for login rules)

A model's name or pattern can be selected from the list of models or directly entered. The list of models comes from models which are currently running and available on the repository which matches the values set in the previous three columns.
Version (only for managed models)

The name or pattern for identifying the version name for the rule.
API (only for model administrator rules)

Shows whether the rules only apply for plug-ins.
inherits

Shows the name of the groups that rules were inherited from. Inherited rules can only be modified in groups they originated from.
reachable

Shows whether the rule cannot be reached, i.e. if it is ineffective:
- Cannot be reached by other rules
  
  The icon's tool tip shows "Rule is not reachable.".
- Project does not exist
  
  The icon's tool tip shows "Project does not exist.".

"Assigned to Groups" Table

The table displays the groups to which the selected group is assigned.

Members Table

This table displays the members (users or groups) assigned to the group.